Bug 29983 - Connection to share with "force group" set ends with NT_STATUS_NO_SUCH_GROUP
Connection to share with "force group" set ends with NT_STATUS_NO_SUCH_GROUP
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 3.1
Other Linux
: P5 normal (vote)
: UCS 3.1-0-errata
Assigned To: Arvid Requate
Stefan Gohmann
https://bugzilla.samba.org/show_bug.c...
:
: 30122 (view as bug list)
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2013-01-10 11:26 CET by Janis Meybohm
Modified: 2014-08-28 11:23 CEST (History)
4 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments
debuglevel 15 log.smbd (491.56 KB, text/plain)
2013-01-10 11:26 CET, Janis Meybohm
Details
debuglevel 15 log.samba (74.69 KB, text/plain)
2013-01-10 11:26 CET, Janis Meybohm
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Janis Meybohm univentionstaff 2013-01-10 11:26:18 CET
Created attachment 4969 [details]
debuglevel 15 log.smbd

This constellation was possible with UCS 3.0-2 and stopped working after the
3.1 update (same share on S3 memberserver (same domain) still works as
expected):


# smbclient -Ubutzer%univention //10.200.6.100/masteur 
Domain=[S4LISH] OS=[Unix] Server=[Samba 4.0.0rc6]
tree connect failed: NT_STATUS_NO_SUCH_GROUP

# testparm -vvv
[masteur]
        path = /masteur
        force group = forceme
        read only = No
        strict locking = No
        vfs objects = acl_xattr


# univention-s4search sAMAccountName=forceme | s4search-decode 
dn: CN=forceme,CN=Groups,DC=s4lish,DC=qa
objectClass: top
objectClass: group
cn: forceme
instanceType: 4
whenCreated: 20130109161227.0Z
whenChanged: 20130109161227.0Z
uSNCreated: 3873
name: forceme
objectGUID: 06803cc4-ecf2-4dee-bb1d-6753b3825fc4
objectSid: S-1-5-21-1738911416-233897720-2251434911-1121
sAMAccountName: forceme
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=s4lish,DC=qa
member: CN=butzer,CN=Users,DC=s4lish,DC=qa
uSNChanged: 3874
distinguishedName: CN=forceme,CN=Groups,DC=s4lish,DC=qa


Neither @S4LISH+forceme nor S-1-5-21-1738911416-233897720-2251434911-1121 are
working as "force group" argument.


It looks like samba is not able to detect the group type though the group
lookup seems fine:
---
[2013/01/10 10:45:19.980795, 10, pid=6201, effective(0, 0), real(0, 0)]
../source3/passdb/lookup_sid.c:77(lookup_name)
  lookup_name: S4LISH\forceme => domain=[S4LISH], name=[forceme]
[2013/01/10 10:45:19.980852, 10, pid=6201, effective(0, 0), real(0, 0)]
../source3/passdb/lookup_sid.c:78(lookup_name)
  lookup_name: flags = 0x077
...
...
...
[2013/01/10 10:45:19.984566, 10, pid=6201, effective(0, 0), real(0, 0)]
../source3/smbd/service.c:342(find_forced_group)
  forceme is a None, not a group
---


Find the full debuglevel 15 log attached.
Comment 1 Janis Meybohm univentionstaff 2013-01-10 11:26:49 CET
Created attachment 4970 [details]
debuglevel 15 log.samba
Comment 2 Janis Meybohm univentionstaff 2013-01-10 11:35:33 CET
http://forum.univention.de/viewtopic.php?f=48&t=2189
Comment 3 Arvid Requate univentionstaff 2013-01-17 19:14:59 CET
A patched version of samba4 is now built in scope errata3.1-0.
Bug and patch are reported upstream.

Advisory: 2013-01-17-samba4.yaml
Comment 4 Arvid Requate univentionstaff 2013-01-23 12:19:21 CET
*** Bug 30122 has been marked as a duplicate of this bug. ***
Comment 5 Stefan Gohmann univentionstaff 2013-01-28 16:02:50 CET
errata YAML: OK

errata function / code: OK

3.1-1 changelog: OK

3.1-1 function / code: OK over Bug #30178
Comment 6 Moritz Muehlenhoff univentionstaff 2013-01-29 13:22:52 CET
http://errata.univention.de/3.1-errata26.html
Comment 7 Arvid Requate univentionstaff 2014-08-28 11:23:30 CEST
Yay, the patch actually gets merged upstream now! :-)