2016-12-23 0:22 GMT+01:00 Andrea Janna <andr...@brazcubas.br>: > Package: samba > Version: 2:4.5.2+dfsg-1 > Severity: normal > Tags: upstream patch
Hi, > After upgrading from Samba 4.4.7 to 4.5.2 user authentication stopped working > in our installation. > > We are mapping (via username map script) usernames from full email addresses > to real Samba usernames so that users can login to Samba server using email > address as username. > Samba is configured as standalone server. > > Upstrean commit 3f82db56cbf2727abd465e28ac02ad2242b47c29 modified client > domain mapping so that an empty domain is not mapped any more to Samba server > domain if username contains "@". > Since we have no domain at our site Windows clients send empty domain string > to Samba when users attempt to log in. > When user tries to login using full email address as username Samba doesn't > map the empty domain to Samba server domain and authentication fails. > > As reported in upstream bug https://bugzilla.samba.org/show_bug.cgi?id=12375 > preserving empty domain is useful only if there is a domain controller. > I'd expect that when Samba configuration is "server role = standalone" empty > client domain will always be mapped to server domain. > > I wrote a simple patch that fixes the problem allowing empty domain mapping > if Samba role is standalone server. Thanks for this report. Can you forward this to upstream bugzilla (linked to https://bugzilla.samba.org/show_bug.cgi?id=12375) and report back bug# here? Thanks -- Mathieu
