On Mon, 21 May 2007 12:31:57 -0500 "Gerald (Jerry) Carter" <[EMAIL PROTECTED]> wrote:
GC> Jean-Jacques Moulis wrote: GC> > By mistake or by design membership in a Windows Primary Group seems to be mandatory! GC> > GC> > We are using printservers configured as member servers of Samba domains. GC> > GC> > with the following configuration GC> > GC> > security = DOMAIN GC> > password server = PDC GC> > encrypt passwords = yes GC> > map to guest = Bad Password GC> > GC> > The Samba PDCs use plain smbpasswd files. GC> > GC> > Since upgrading to 3.0.25 and regressing to 3.0.24-gc-1 some users couldn't GC> > print (strange considering map to guest = Bad Password) GC> > GC> > they got an NT_STATUS_UNSUCCESSFUL in log files and were refused printing. GC> > GC> > The common denominator for users with print problems was GC> > the lack of mapping from their GID to a SID GC> > GC> > net groupmap add ntgroup="A new group" unixgroup=gidgroupname GC> > solved the problem but it took a while to find out :-) GC> Please test the gc-2 snapshot. This might be related to GC> the regression from the CVE-2007-2444 patch. The gc-2 snapshot gives the same result for people with an unmapped GID (or not explicitly in the Domain User group -513) I have a log level 10 for both the PDC and the domain member. How should I made it available to you? As I said, mapping the GID to a SID solves the problem, I'm prepared to accept the behavior as feature :-) -- Jean-Jacques Moulis Tel: (013) 281684 ISY Fax: (013) 139282 Linköping University E-mail: [EMAIL PROTECTED] 581 83 Linköping -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
