[Samba] Domain-name appended into username when "selecting users or groups"

[George Mamalakis]

Dear all,

I am facing a peculiar situation:
on my smb.conf  log level = 5, and on my windows machine I log on as a 
local administrator to add remote desktop users that are in fact domain 
users.
When my worgroup = SOMETHING, everything works fine. When I change my 
worgroup to: workgroup = example.com, and try to add a new remote 
desktop user, and set as an object name example.com\user and try to 
"check name", after a give the username and password I get the following 
error:

The following error occurred while using the user name 
(u...@example.com). and password you entered:
Logon failure: unknown user name or bad password.

Which is true, since on the samba server, on my machine log I get:
# grep -i user machine

 Got user=[u...@example.com] domain=[] workstation=[MACHINE] len1=24 
len2=24
  Mapping user []\[u...@example.com] from workstation [MACHINE]
  Mapped domain from [] to [EXAMPLE.COM] for user [u...@example.com] 
from workstation [MACHINE]
  attempting to make a user_info for u...@example.com (u...@example.com)
  making strings for u...@example.com's user_info struct
  making blobs for u...@example.com's user_info struct
  check_ntlm_password:  Checking password for unmapped user 
[]\[u...@example.com]@[MACHINE] with the new password interface
  check_ntlm_password:  mapped user is: 
[example.com]\[u...@example.com]@[MACHINE]
  smbldap_search_ext: base => [dc=ee,dc=auth,dc=gr], filter => 
[(&(uid=u...@example.com)(objectclass=sambaSamAccount))], scope => [2]
  ldapsam_getsampwnam: Unable to locate user [u...@example.com] count=0
  check_sam_security: Couldn't find user 'u...@example.com' in passdb.
  check_ntlm_password: sam authentication for user [u...@example.com] 
FAILED with error NT_STATUS_NO_SUCH_USER
  check_ntlm_password:  Authentication for user [u...@example.com] -> 
[u...@example.com] FAILED with error NT_STATUS_NO_SUCH_USER

which shows that domain=[] (it's empty), whereas in the normal case it 
should be: domain=[EXAMPLE.COM] (which is the case when I "simple login" 
from my client hosts).

To sum things up (and clarify them a bit):
- when workgroup = SOMETHING, login on to domain as well as "Select 
Users or Group" works like a charm.
- when workgroup = example.com, login on to domain works fine, "Select 
Users or Group" fails due to the aforementioned reason.

my server is a fbsd box (64bit):
# uname -a
FreeBSD filesrv.example.com 8.1-STABLE FreeBSD 8.1-STABLE #1: Mon Sep 20 
13:33:27 EEST 2010     
r...@filesrv.example.com:/usr/obj/usr/src/sys/FILESRV  amd64

and samba is installed from ports (version 3.4.9). Samba's backend is 
ldap, and both smb.conf's are *exactly* the same. The only difference is 
the workgroup directive (and the relevant directives in the 
smbldap-utils configuration file, which shouldn't make any difference).

I would be delighted if anyone could direct me to the right path.
I have not included my smb.conf files; if needed I will attach them "on 
demand" :) .

Thank you all for your time in advance,

mamalos

--
George Mamalakis

IT Officer
Electrical and Computer Engineer (Aristotle Un. of Thessaloniki),
MSc (Imperial College of London)

Department of Electrical and Computer Engineering
Faculty of Engineering
Aristotle University of Thessaloniki

phone number : +30 (2310) 994379

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba