Hello Mike, in the end it works.
I applied your patch to winbind, although it seemed to be applied while I compiled your idmap_files.so. compiled and installed nss_winbind.so restarted nscd restarted winbind and NOW I can connect to that machine from explorer, set my acl's using the uid provided from winbind etc... As you asked for, find attached the compiled idmap_files.so stuff which does not work on my machine. Best Regards Thanks again Roman <<idmap_file.tar.gz>> > -----Ursprüngliche Nachricht----- > Von: Mike Gerdts [SMTP:[EMAIL PROTECTED]] > Gesendet am: Montag, 13. Mai 2002 20:00 > An: [EMAIL PROTECTED] > Betreff: Re: Samba, winbind, solaris and your patch > > On Mon, 2002-05-13 at 11:20, [EMAIL PROTECTED] wrote: > > Hello Mike, > > > > I was veerrryyy interested in your work when I first saw your posting > > concerning winbind and the related problems when running it on more than > one > > machine. > > Glad to hear it. I was begininning to think that I was the only one > looking for this functionality. > > > I therefore immediately downloaded your patch and enhancements to > winbind > > and applied it to samba 2.2.4. > > > > But when starting winbindd I get error messages in the log.winbindd > stating > > that the loader ld.so.1 can not find the symbol main in idmap_file.so. > > Hmmmm... not sure about that. Could you send me the version that you > compiled so that I can compare it against the one that works for me? > Also, please include any modifications that you did to the makefile to > get it to compile. > > > Any idea what could be wrong? > > Perhaps a different compiler and/or linker contributed to the problems. > I am using gcc 2.95.2 on Solaris 8. > > > My configuration is as follows: > > > > Solaris 2.6 > > Samba 2.2.4 > > gcc et al 2.95.3 > > > > > > Besides the problem that winbindd, without your patch, causes trouble in > an > > multi-machine environment I face the following problem, with and without > > your patch, as well: > > > > - winbindd is running > > - wbinfo -u --> shows all domain users > > - wbinfo -g --> shows all domain groups > > - getent passwd --> shows all, local and domain, users > > - getent group --> shows all, local and domain, groups > > - getent passwd domain+domuser --> shows passwd entry for specified > domain > > user > > - wbinfo -a domain+domuser%passwd --> both authentication methods > succeed > > - when install pam_winbind --> login to solaris as domain+domuser and > > domain-passwd works > > > > BUT > > > > connecting from an windows-box in explorer to a share on that > > winbind-machine is not working. > > I tried to track it down and I think I found out that when winbind tries > to > > call the solaris function 'getpwnam' that function returns a > null-pointer. > > This is likely the bug related to the passwd structure on Solaris having > pw_age and pw_comment fields. See > http://lists.samba.org/pipermail/samba-technical/2002-May/036614.html > for details. If you didn't remove that part from my patch, you should > be protected from this bug. You may want to take a look at > source/lib/system.c. In wsys_getpwnam() there is another function that > copies the passwd structure (wsys_getpwnam). It looks as though it is > not called by anything, but perhaps I am missing some funky macro or > define that comes out of configure somewhere. > > If there is another problem, I am not sure where exactly it would be > at. The bug I found was quite difficult to find until I recompiled nscd > with debugging symbols. Unfortunately, that is not an option for most > people, especially with Solaris 2.6. AFAIK, Sun only gave the Solaris > 2.5.1, 2.6, and 7 code to univerisities. The only Sun source that I > have access to for debugging things like this is Solaris 8. > > > I assume from your postings that you are familiar with c, solaris and > have a > > running winbind environment. > > I have tried minimal functionality of winbindd. I do not want to use > the winbind PAM module because UNIX users should authenticate against > NIS. getent passwd <domain\\user> and getent passwd <uid> work just > fine. Exporer on NT4 and Win2k is able to create files and display ACLs > consistent with what I expect, given the U/GIDs assigned by winbindd. > ls and getfacl concur with the results that Windows explorer show. > Also, I explorer on Windows 98 is able to create directories just fine > (that is all I tried from 98). > > > Any idea what causes that problem, when I posted this problem to the > > samba-technical mailing list no one was responding except some other > usesrs > > facing the same problem. > > > > Can you contribute in any matter to this problems? > > > > Would be veeerrryyyy helpful. > > > > Thanks in advance and best regards > > > > Roman > > If you don't have a reason for not Cc'ing the list, please do so in the > future so that others can benefit from your question and my response. > It helps the samba team know that there is more than one person that > would like this functionality and they are more likely to include it in > future releases. > > Please let me know if this does or does not help. > Mike
idmap_file.tar.gz
Description: Binary data