On Fri, Sep 09, 2016 at 02:11:59PM +0000, Joakim Tjernlund wrote:
On Fri, 2016-09-09 at 16:01 +0200, Joakim Tjernlund wrote:
> On Fri, 2016-09-09 at 14:48 +0200, Sumit Bose wrote:
> >
> > On Fri, Sep 09, 2016 at 11:46:27AM +0000, Joakim Tjernlund wrote:
> > >
> > >
> > > Trying to bring up samba with sssd-13.4 and for some reason samba fails
> > > to lookup users: From smb.log I have:
> > >
> > > ....
> > >
> > > [2016/09/09 13:37:40.480053, 4, pid=15633, effective(0, 0), real(0, 0)]
> > > ../source3/param/loadparm.c:3677(lp_load_ex)
> > > pm_process() returned Yes
> > > [2016/09/09 13:37:40.480068, 3, pid=15633, effective(0, 0), real(0, 0)]
> > > ../source3/param/loadparm.c:1476(lp_add_ipc)
> > > adding IPC service
> > > [2016/09/09 13:37:40.480087, 5, pid=15633, effective(0, 0), real(0, 0)]
> > > ../source3/lib/username.c:181(Get_Pwnam_alloc)
> > > Finding user TRAN_01\jocke
> > > [2016/09/09 13:37:40.480095, 5, pid=15633, effective(0, 0), real(0, 0)]
> > > ../source3/lib/username.c:120(Get_Pwnam_internals)
> > > Trying _Get_Pwnam(), username as lowercase is tran_01\jocke
> > > [2016/09/09 13:37:40.480102, 5, pid=15633, effective(0, 0), real(0, 0)]
> > > ../source3/lib/username.c:159(Get_Pwnam_internals)
> > > Get_Pwnam_internals did find user [TRAN_01\jocke]!
> > > [2016/09/09 13:37:40.480121, 10, pid=15633, effective(0, 0), real(0, 0)]
> > > ../source3/passdb/lookup_sid.c:77(lookup_name)
> > > lookup_name: TRAN_01\jocke => domain=[TRAN_01], name=[jocke]
> > > [2016/09/09 13:37:40.480133, 10, pid=15633, effective(0, 0), real(0, 0)]
> > > ../source3/passdb/lookup_sid.c:78(lookup_name)
> > > lookup_name: flags = 0x073
> > > [2016/09/09 13:37:40.480141, 10, pid=15633, effective(0, 0), real(0, 0)]
> > > ../source3/lib/util_wellknown.c:162(lookup_wellknown_name)
> > > map_name_to_wellknown_sid: looking up TRAN_01\jocke
> > > [2016/09/09 13:37:40.480152, 1, pid=15633, effective(0, 0), real(0, 0)]
> > > ../source3/auth/token_util.c:937(create_token_from_username)
> > > lookup_name_smbconf for TRAN_01\jocke failed
> > > [2016/09/09 13:37:40.480160, 10, pid=15633, effective(0, 0), real(0, 0),
class=auth]
> > > ../source3/auth/user_krb5.c:274(make_session_info_krb5)
> > > failed to create local token: NT_STATUS_NO_SUCH_USER
> > > [2016/09/09 13:37:40.480170, 1, pid=15633, effective(0, 0), real(0, 0)]
> > > ../source3/auth/auth_generic.c:127(auth3_generate_session_info_pac)
> > > Failed to map kerberos pac to server info (NT_STATUS_NO_SUCH_USER)
> > >
> > >
> > > On older systems I have samba 3.6.25 and sssd 1.12.5 and there samba works
fine.
> > > Is there som change I have missed when upgrading to newer samba sssd?
> >
> > Are you using SSSD's version of libwbclient to help samba to map SID to
>
> hmm, I got both (/usr/lib64/libwbclient.so.0 and
/usr/lib64/sssd/modules/libwbclient.so)
> and wbinfo -n 'TRAN_01\jocke' reports:
> wbinfo -n 'TRAN_01\jocke'
> could not obtain winbind interface details: WBC_ERR_WINBIND_NOT_AVAILABLE
> could not obtain winbind separator!
> failed to call wbcLookupName: WBC_ERR_WINBIND_NOT_AVAILABLE
> Could not lookup name TRAN_01\jocke
>
> I guess the problem is that samba uses its own libwbclient.so and winbind
> is not configured?
Making samba use sssd's libwbclient.so like so:
cd /usr/lib64
mv libwbclient.so.0 libwbclient.so.0.old
ln -s sssd/modules/libwbclient.so.0.12.0 libwbclient.so.0
makes Samba and wbinfo work, thanks!
glad to hear that it works for you.
Now I need to figure out what to do on a permanent basis, not sure
what to do here, any
suggestion welcome :)
Does gentoo have the alternative command which we use in Fedora/RHEL
(see my other mail).
One thing I have noted is that on Gentoo, sssd-ad has samba as a dependency. Is samba
really required to use sssd-ad?
SSSD uses some libraries from the Samba projects, e.g. nbr libraries to
decode some blobs. Depending on the packaging this requires to include
other components of Samba as well.
bye,
Sumit
>
> Jocke
> _______________________________________________
> sssd-users mailing list
> sssd-users(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org