Public bug reported:

Binary package hint: likewise-open

Description:    Ubuntu 10.04 LTS
Release:        10.04
likewise-open: 5.4.0.42111-2ubuntu1

I’ve successfully joined domain Windows Server 2003 using LikewiseOpen from 
Ubuntu repos, but can`t login to Ubuntu-server 10.04 with russian usernames. 
When I try to do it with test username (only latin symbols) - everything seems 
good.
I try to troubleshoot this problem step by step using guide 
http://www.likewise.com/resources/documentation_library/manuals/open/likewise-open-54-guide.html#SolveLogonProblems
 :
1) domainjoin-cli query
Name = eibuntu
Domain = OUR.DMN
Distinguished Name = CN=EIBUNTU,CN=Computers,DC=our,DC=dmn ;

2) When trying logon to Ubuntu, using escape the slash character with a
slash character (OUR\\Петров) ;

3) clear the cache - sudo lw-ad-cache --delete-all
The cache has been emptied successfully ;

4) sudo kdestroy
kdestroy: No credentials cache found while destroying cache ;

5) service lsassd status
running (standalone: 1337) ;

6) lw-get-dc-name our.domain
Printing LWNET_DC_INFO fields:
===============================
dwDomainControllerAddressType = 23
dwFlags = 1021
dwVersion = 5
wLMToken = 65535
wNTToken = 65535
pszDomainControllerName = dc.our.dmn
pszDomainControllerAddress = 192.168.x.1
pucDomainGUID(hex) = 51 AC 8B FE B2 85 3C 4B 9C 73 19 B0 25 11 69 9D
pszNetBIOSDomainName = OUR
pszFullyQualifiedDomainName = our.dmn
pszDnsForestName = our.dmn
pszDCSiteName = Default-First-Site-Name
pszClientSiteName = Default-First-Site-Name
pszNetBIOSHostName = DC
pszUserName = <EMPTY>

The result shows the correct domain controller name and IP address ;

7) lw-find-user-by-name our\\Петров
User info (Level-0):
====================
Name:  OUR\Петров
SID:  S-1-5-21-507921405-492894223-839522115-12638
Uid:  58208606
Gid:  58196481
Gecos:  Петров Александр Алексеевич
Shell:  /bin/bash
Home dir:  /home/likewise-open/OUR/Петров
Logon restriction: NO

8) lw-get-status
LSA Server Status:
Compiled daemon version: 5.0.0.0
Packaged product version: 5.4.0.42111
Uptime:  0 days 15 hours 18 minutes 26 seconds
[Authentication provider: lsa-activedirectory-provider]

Status:  Online
Mode:  Un-provisioned
Domain:  OUR.DMN
Forest:  OUR.DMN
Site:  Default-First-Site-Name
Online check interval:  300 seconds
[Trusted Domains: 2]
..........................................

9) su our\\Петров
And here we got trouble:
su: Authentication failure

In auth.log I see error:
eibuntu su[2530]: [module:pam_lsass]pam_sm_authenticate error 
[login:our\Петров][error code:40067]
eibuntu su[2530]: pam_authenticate: Authentication failure
eibuntu su[2530]: FAILED su for our\Петров by ubadmin
eibuntu su[2530]: - /dev/pts/1 ubadmin:our\Петров

In daemon.log:
eibuntu lsassd[1337]: 0xb1fb2b70:Failed to authenticate user (name = 
‘our\Петров’)
-> error = 40067, symbol = LW_ERROR_STRING_CONV_FAILED, client pid = 8091

10) well, I try to test ssh:
ssh our\\Петр�...@localhost

In auth.log:
eibuntu sshd[13675]: [module:pam_lsass]pam_sm_authenticate error 
[login:our\Петров][error code:40067]
eibuntu sshd[13595]: error: PAM: Authentication failure for 
our\\\320\237\320\265\321\202\321\200\320\276\320\262 from localhost

In daemon.log:
eibuntu lsassd[1337]: 0xb1fb2b70:Failed to authenticate user (name = 
‘our\Петров’) ->
error = 40067, symbol = LW_ERROR_STRING_CONV_FAILED, client pid = 13675

Maybe, it`s not involved with impossibility to login, but it is clear
that something wrong with it...

P.S. I posted this bug as well on Likewise forum:
http://www.likewise.com/community/index.php/forums/viewthread/743/

** Affects: likewise-open (Ubuntu)
     Importance: Undecided
         Status: New

** Summary changed:

- Can`t su or ssh with with russian (contain cyrillic symbols) domain usernames
+ Can`t su or ssh with russian (contain cyrillic symbols) domain usernames

-- 
Can`t su or ssh with russian (contain cyrillic symbols) domain usernames
https://bugs.launchpad.net/bugs/598034
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to