Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-07-25 Thread Tris Mabbs
Good day, one and all ... I just had to rebuild our main Samba server (OpenSlowlaris - Slowlaris 11.11), during which I put the latest (at the time; currently 4.2.0pre1-GIT-b505111) Samba4 on there. I thought that by now that Gunther's speculative changes to improve the PAC decode might have

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-03-15 Thread Tris Mabbs
So it seems that with these changes, kerberos_decode_pac() is never entered with client_principal anything other than a NULL pointer. So I'm (very) happy that these changes fix my problem. However it does seem a little curious that client_principal now never appears to be set - I

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-03-14 Thread Andrew Bartlett
On Fri, 2013-03-08 at 17:20 +, Tris Mabbs wrote: Hello again everyone, On 08 March 2013 13:10, Michael Wood wrote: ... ---Cut here. Sorry, I forgot a step. You would have needed a git fetch gd in there before the checkout. Ah ha! That would explain it then. Well,

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-03-08 Thread Tris Mabbs
Hiya Andrew, Günther, Andrew, many thanks for following up on this. Where did we get with this? Currently stalled, temporarily I'm sure, by my ignorance of git I'm afraid. Günther pointed me at a branch with some changes but I've been unable to find it, either through the Samba GitWeb view on

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-03-08 Thread Michael Wood
On 8 March 2013 11:03, Tris Mabbs tm-samba201...@firstgrade.co.uk wrote: Hiya Andrew, Günther, Andrew, many thanks for following up on this. Where did we get with this? Currently stalled, temporarily I'm sure, by my ignorance of git I'm afraid. If you have no local changes, try this:

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-03-08 Thread Tris Mabbs
Hiya Michael, Many thanks for that - very much appreciated. I think I should learn more about git than currently I know - however this is not the time to do so. So I ran your commands, first not worrying about any local changes so just updating my local copy: ---Cut here: samba-master % git

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-03-08 Thread Michael Wood
Hi On 8 March 2013 13:37, Tris Mabbs tm-samba201...@firstgrade.co.uk wrote: Hiya Michael, Many thanks for that - very much appreciated. I think I should learn more about git than currently I know - however this is not the time to do so. So I ran your commands, first not worrying about any

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-03-08 Thread Tris Mabbs
Hello again everyone, On 08 March 2013 13:10, Michael Wood wrote: ... ---Cut here. Sorry, I forgot a step. You would have needed a git fetch gd in there before the checkout. Ah ha! That would explain it then. Well, forgotten command or not, the help was much appreciated and I now have

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-03-07 Thread Andrew Bartlett
On Thu, 2013-02-28 at 22:33 +, Tris Mabbs wrote: Hiya Günther, Absolutely - I'm really sorry, I intended to try this today but haven't had the chance. Hopefully I will get the chance tomorrow, and I'll let you know the results. Many thanks, much appreciated :-) Where did we get

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-28 Thread Guenther Deschner
Hi Triss, can you test this branch? https://git.samba.org/?p=gd/samba/.git;a=shortlog;h=refs/heads/master-krb5pac It contains fixes for various pac buffer types. Let us know if it resolves your issues. Thanks, Guenther -- Günther DeschnerGPG-ID: 8EE11688 Red Hat

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-28 Thread Tris Mabbs
Hiya Günther, Absolutely - I'm really sorry, I intended to try this today but haven't had the chance. Hopefully I will get the chance tomorrow, and I'll let you know the results. Many thanks, much appreciated :-) Tris. -Original Message- From: Guenther Deschner [mailto:g...@samba.org]

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-27 Thread Tris Mabbs
I do so enjoy working with users who I can ask to 'put some code in' and who can handle this so well :-). Why thank you, kind Sir :-) I do so enjoy working with people who quite obviously really, REALLY, know their subject :-) In my case, evidence only of far too many years stuck in front of a

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-27 Thread Gregory Sloop
I do so enjoy working with users who I can ask to 'put some code in' and who can handle this so well :-). TM Why thank you, kind Sir :-) TM I do so enjoy working with people who quite obviously really, REALLY, know their subject :-) TM In my case, evidence only of far too many years stuck

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-27 Thread Tris Mabbs
I do so enjoy working with users who I can ask to 'put some code in' and who can handle this so well :-). Why thank you, kind Sir :-) I do so enjoy working with people who quite obviously really, REALLY, know their subject :-) In my case, evidence only of far too many years stuck in front of

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-26 Thread Andrew Bartlett
On Mon, 2013-02-25 at 11:51 +, Tris Mabbs wrote: Hello, We're having a problem with Samba 4 joined to a Server 2008 R2 domain (at Server 2008 functional level across the forest). The interesting thing is that this only affects a single user - all other accounts work without

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-26 Thread Tris Mabbs
Wow. Hiya Andrew, OK, this sounds like a very promising approach, and potentially saves me working through a large number of git bisects (as also most helpfully suggested by Michael Wood) - so far, I'm right back into the beta code and there have been a lot of commits since then... I'm not

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-26 Thread Andrew Bartlett
On Tue, 2013-02-26 at 11:22 +, Tris Mabbs wrote: Wow. Hiya Andrew, OK, this sounds like a very promising approach, and potentially saves me working through a large number of git bisects (as also most helpfully suggested by Michael Wood) - so far, I'm right back into the beta code

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-26 Thread Tris Mabbs
What I was getting at about the full name is that if this was a odd character encoding issue, knowing that this was a user with non-ascii full name would be an important data point. Yes, I see what you mean. No, neither the full username, nor the login name, contain anything other than

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-25 Thread Michael Wood
Hi You might try getting a packet capture. By the way, what's common between the user before you deleted the account and the one you created later, besides the username? The password? Can you replicate this in a test environment? If you can replicate this in a test environment and you know

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

2013-02-25 Thread Tris Mabbs
Hiya Michael, Many thanks for the quick and helpful response. Yes, I can certainly try a packet capture; I think I'll go with your other suggestion first though, that of using git bisect to track down the problematic version. I'm sorry, that should have occurred to me . Once I've