Opened 6 years ago

Last modified 3 months ago

#30951 assigned defect

Samba3 not reading groups resulting in logon failure. (Lion)

Reported by: mandrake@… Owned by:
Priority: Normal Milestone:
Component: ports Version: 2.0.1
Keywords: lion Cc: joe.neal@…, eduo@…, laurent.bigue@…, cooljeanius (Eric Gallager)
Port: samba3

Description

I installed samba3 on my 2010 Mac Mini. I try to log in from another Mac Mini and get a NT_STATUS_LOGON_FAILURE (using smbclient). I have added the smb user with smbpasswd -a. I have disabled the OSX windows file sharing and removed the launchd file that starts apple's netbios.

I enabled debugging in smbd and nmbd to see where the login fails. The failure is attached in a text file. It seems to be because the server can't get a correct list of groups. I can pull up a group list with no problem in a terminal window for the user.

Attachments (1)

samba failure.txt (13.3 KB) - added by mandrake@… 6 years ago.
text file of debug log.

Download all attachments as: .zip

Change History (23)

Changed 6 years ago by mandrake@…

text file of debug log.

comment:1 Changed 6 years ago by mandrake@…

  • Cc mandrake@… added

Cc Me!

comment:2 Changed 6 years ago by jmroot (Joshua Root)

  • Cc mandrake@… removed
  • Keywords lion added; samba3 removed
  • Owner changed from macports-tickets@… to mww@…
  • Priority changed from High to Normal

Please remember to cc the maintainer. You do not need to be in cc when you are the reporter. As per the ticket guidelines, the High priority is reserved for the use of MacPorts team members.

comment:3 in reply to: ↑ description Changed 6 years ago by joe.neal@…

Replying to mandrake@…:

I installed samba3 on my 2010 Mac Mini. I try to log in from another Mac Mini and get a NT_STATUS_LOGON_FAILURE (using smbclient). I have added the smb user with smbpasswd -a. I have disabled the OSX windows file sharing and removed the launchd file that starts apple's netbios.

I enabled debugging in smbd and nmbd to see where the login fails. The failure is attached in a text file. It seems to be because the server can't get a correct list of groups. I can pull up a group list with no problem in a terminal window for the user.

I have the exact same issue, and with my debug set to 10, I see the same exact log messages and errors. After some searching, I don't know if this is related to > 16 groups, or not?

My user is a member of 17 groups.

comment:4 Changed 6 years ago by joe.neal@…

  • Cc joe.neal@… added

Cc Me!

comment:5 Changed 6 years ago by joe.neal@…

Verified that this is related to too many groups. As I mentioned above, my user is a member of 17 groups. I created a new user (who with no other changes, is a member of 6 groups), and that user works fine.

comment:6 Changed 6 years ago by mandrake@…

It seems that the >16 groups bug had been addressed a few years ago. I wonder if it has somehow found its way back into the code. I'm not sure how to remove myself from groups in Lion and what sort of impact that might have. I'm hoping it can be addressed through this route, instead.

comment:7 Changed 6 years ago by joe.neal@…

Yes, I agree that this was resolved previously. However, I have verified that in my case, a user with less than 16 groups works, and one over 16, does not. I certainly agree that it would be nice to have this resolved properly, and not a workaround, as I don't know how to remove myself from groups (without breaking things at least).

comment:8 Changed 6 years ago by mandrake@…

I created another non-admin account on the machine to connect to. It works fine now. It will suffice until someone can find time to re-address the >16 group bug.

comment:9 Changed 5 years ago by eduo@…

  • Cc eduo@… added

Cc Me!

comment:10 Changed 5 years ago by laurent.bigue@…

  • Cc laurent.bigue@… added

Cc Me!

comment:11 Changed 5 years ago by laurent.bigue@…

I experience exactly the same problem and I was unable to find any solution, since any new user is created with a minimum of 23 groups in my system (among them, 13 sharepoints)!

comment:12 follow-up: Changed 5 years ago by jmroot (Joshua Root)

Is this still a problem with 3.6.3?

comment:13 in reply to: ↑ 12 ; follow-up: Changed 5 years ago by eduo@…

Replying to jmr@…:

Is this still a problem with 3.6.3?

It is. Not sure about 3.6.5

comment:14 in reply to: ↑ 13 Changed 5 years ago by m.koss@…

Replying to eduo@…:

Replying to jmr@…:

Is this still a problem with 3.6.3?

It is. Not sure about 3.6.5

Yes, same issue with 3.6.5. Is anyone looking at it ?

comment:15 Changed 5 years ago by public@…

Hi guys. Can you help me how temporarily resolve this problem. I tried many things. Without success.

comment:16 Changed 5 years ago by public@…

  • Cc public@… added

Cc Me!

comment:17 Changed 5 years ago by public@…

  • Cc public@… removed

Cc Me!

comment:18 Changed 5 years ago by eduo@…

As documented in 34572, no fix has been found but the patch below provides a workaround (essentially by permanently allocating a ridiculous amount of slots in memory for more groups than there should be):

https://trac.macports.org/attachment/ticket/34572/patch-source_lib_system_smbd_c.diff

Of course, now that this comes out Samba's port can't compile in Mountain Lion :)

comment:19 Changed 5 years ago by eduo@…

Sorry. Should've mentioned that Samba not compiling in Mountain Lion is tracked in ticket 35343

comment:20 Changed 3 years ago by jeremyhu (Jeremy Huddleston Sequoia)

Has dupe: #34572

comment:21 Changed 3 years ago by cooljeanius (Eric Gallager)

  • Cc egall@… added

Cc Me!

comment:22 Changed 3 months ago by mf2k (Frank Schima)

  • Owner mww@… deleted
  • Status changed from new to assigned
Note: See TracTickets for help on using tickets.