On Fri, Sep 09, 2016 at 02:00:53PM +0000, Joakim Tjernlund wrote:
On Fri, 2016-09-09 at 14:48 +0200, Sumit Bose wrote:
> On Fri, Sep 09, 2016 at 11:46:27AM +0000, Joakim Tjernlund wrote:
> >
> > Trying to bring up samba with sssd-13.4 and for some reason samba fails
> > to lookup users: From smb.log I have:
> >
> > ....
> >
> > [2016/09/09 13:37:40.480053, 4, pid=15633, effective(0, 0), real(0, 0)]
> > ../source3/param/loadparm.c:3677(lp_load_ex)
> > pm_process() returned Yes
> > [2016/09/09 13:37:40.480068, 3, pid=15633, effective(0, 0), real(0, 0)]
> > ../source3/param/loadparm.c:1476(lp_add_ipc)
> > adding IPC service
> > [2016/09/09 13:37:40.480087, 5, pid=15633, effective(0, 0), real(0, 0)]
> > ../source3/lib/username.c:181(Get_Pwnam_alloc)
> > Finding user TRAN_01\jocke
> > [2016/09/09 13:37:40.480095, 5, pid=15633, effective(0, 0), real(0, 0)]
> > ../source3/lib/username.c:120(Get_Pwnam_internals)
> > Trying _Get_Pwnam(), username as lowercase is tran_01\jocke
> > [2016/09/09 13:37:40.480102, 5, pid=15633, effective(0, 0), real(0, 0)]
> > ../source3/lib/username.c:159(Get_Pwnam_internals)
> > Get_Pwnam_internals did find user [TRAN_01\jocke]!
> > [2016/09/09 13:37:40.480121, 10, pid=15633, effective(0, 0), real(0, 0)]
> > ../source3/passdb/lookup_sid.c:77(lookup_name)
> > lookup_name: TRAN_01\jocke => domain=[TRAN_01], name=[jocke]
> > [2016/09/09 13:37:40.480133, 10, pid=15633, effective(0, 0), real(0, 0)]
> > ../source3/passdb/lookup_sid.c:78(lookup_name)
> > lookup_name: flags = 0x073
> > [2016/09/09 13:37:40.480141, 10, pid=15633, effective(0, 0), real(0, 0)]
> > ../source3/lib/util_wellknown.c:162(lookup_wellknown_name)
> > map_name_to_wellknown_sid: looking up TRAN_01\jocke
> > [2016/09/09 13:37:40.480152, 1, pid=15633, effective(0, 0), real(0, 0)]
> > ../source3/auth/token_util.c:937(create_token_from_username)
> > lookup_name_smbconf for TRAN_01\jocke failed
> > [2016/09/09 13:37:40.480160, 10, pid=15633, effective(0, 0), real(0, 0),
class=auth]
> > ../source3/auth/user_krb5.c:274(make_session_info_krb5)
> > failed to create local token: NT_STATUS_NO_SUCH_USER
> > [2016/09/09 13:37:40.480170, 1, pid=15633, effective(0, 0), real(0, 0)]
> > ../source3/auth/auth_generic.c:127(auth3_generate_session_info_pac)
> > Failed to map kerberos pac to server info (NT_STATUS_NO_SUCH_USER)
> >
> >
> > On older systems I have samba 3.6.25 and sssd 1.12.5 and there samba works
fine.
> > Is there som change I have missed when upgrading to newer samba sssd?
>
> Are you using SSSD's version of libwbclient to help samba to map SID to
hmm, I got both (/usr/lib64/libwbclient.so.0 and /usr/lib64/sssd/modules/libwbclient.so)
and wbinfo -n 'TRAN_01\jocke' reports:
wbinfo -n 'TRAN_01\jocke'
could not obtain winbind interface details: WBC_ERR_WINBIND_NOT_AVAILABLE
could not obtain winbind separator!
failed to call wbcLookupName: WBC_ERR_WINBIND_NOT_AVAILABLE
Could not lookup name TRAN_01\jocke
I guess the problem is that samba uses its own libwbclient.so and winbind
is not configured?
iirc you are using gentoo. In Fedora/RHEL is is possible to switch
those two libraries with the alternatives command.
To make at least wbinfo try to use SSSD's version you can try calling it
as:
LD_LIBRARY_PATH=/usr/lib64/sssd/modules wbinfo -n 'TRAN_01\jocke'
as long as wbinfo is not complied with rpath or similar it should pick
/usr/lib64/sssd/modules/libwbclient.so.0 instead of
/usr/lib64/libwbclient.so.0. If there is no
/usr/lib64/sssd/modules/libwbclient.so.0 you should add it as a softlink
to /usr/lib64/sssd/modules/libwbclient.so. I would also expect that
there are link with ends with a version number like 11 or 12.
If the LD_LIBRARY_PATH trick does not work you can try to replace
/usr/lib64/libwbclient.so.0 by /usr/lib64/sssd/modules/libwbclient.so
but please make sure to keep a copy so that the change can be reverted.
HTH
bye,
Sumit
>
> Jocke
> > user names and POSIX IDs? If not, it might help to install it. If yes,
> > you can check with "wbinfo -n 'TRAN_01\jocke'" if it is
working as
> > expected. If not, please send me the strace output of the wbinfo run and
> > the related SSSD logs.
> >
> _______________________________________________
> sssd-users mailing list
> sssd-users(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/admin/lists/sssd-users@lists.fedorahosted.org