[Samba] Problem with winbind not seeing a user as part of a group

2008-02-12 Thread Trimble, Ronald D
Everyone, Here is a challenge for all of you samba experts! Lately I have been seeing a problem where winbind is not correctly identifying a user as a member of a group he most certainly belong to. This is with a Domain Local group so I know samba should support it.

Re: [Samba] Problem with winbind not seeing a user as part of a group

2008-02-12 Thread Scott Lovenberg
Trimble, Ronald D wrote: I have never explored those options. We have auth fall through turned off. If the authentication fails, they get a 401 message indicating they don't have permissions. Here is an example from our vhosts.conf... Location /scm/spar/svn

RE: [Samba] Problem with winbind not seeing a user as part of a group

2008-02-12 Thread Trimble, Ronald D
That may be possible, but like I said, sometimes it works and sometimes it doesn't. Sometimes the span between the two is only a few seconds. From: Scott Lovenberg [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 12, 2008 10:05 PM To: Trimble, Ronald D Cc: samba@lists.samba.org Subject: Re:

RE: [Samba] Problem with winbind not seeing a user as part of a group

2008-02-12 Thread Trimble, Ronald D
I have never explored those options. We have auth fall through turned off. If the authentication fails, they get a 401 message indicating they don't have permissions. Here is an example from our vhosts.conf... Location /scm/spar/svn DAV svn SVNPATH

Re: [Samba] Problem with winbind not seeing a user as part of a group

2008-02-12 Thread Scott Lovenberg
Trimble, Ronald D wrote: It looks like it is only happening when apache2 is involved. Although, other login methods are far less common. I have a suspicion it may be related to the mod_auth_pam module but what I don't understand is why it is happening. Mod_auth_pam makes dozens of requests

RE: [Samba] Problem with winbind not seeing a user as part of a group

2008-02-12 Thread Trimble, Ronald D
It looks like it is only happening when apache2 is involved. Although, other login methods are far less common. I have a suspicion it may be related to the mod_auth_pam module but what I don't understand is why it is happening. Mod_auth_pam makes dozens of requests to winbind for each

Re: [Samba] Problem with winbind not seeing a user as part of a group

2008-02-12 Thread Scott Lovenberg
Trimble, Ronald D wrote: Everyone, Here is a challenge for all of you samba experts! Lately I have been seeing a problem where winbind is not correctly identifying a user as a member of a group he most certainly belong to. This is with a Domain Local group so I know samba