Re: [Samba] User longer than 20 characters can't join domain (windows 7 pro)

2011-11-11 Thread Volker Lendecke
On Fri, Nov 11, 2011 at 08:08:38AM +, Arief Yudhawarman wrote:
> We are using samba 3.4.8.
> 
> We have some pc's using OS Windows XP Pro dan others Windows 7 Pro.
> All of them can join and logon domain to samba PDC + LDAP.
> 
> FYI, the windows 7 clients are already hacked at registry settings:
> [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters]
> "DNSNameResolutionRequired"=dword:
> "DomainCompatibilityMode"=dword:0001
> 
> When I am creating user account longer than 20 characters, eg. 
> projcontrol.sect.head,
> something happens. On Windows XP Pro, that user can logon domain smoothly but 
> on
> Windows 7 Pro the user can't logon domain.

https://bugzilla.samba.org/show_bug.cgi?id=7343

Known problem, very likely a Windows bug.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] User longer than 20 characters can't join domain (windows 7 pro)

2011-11-11 Thread Arief Yudhawarman
We are using samba 3.4.8.

We have some pc's using OS Windows XP Pro dan others Windows 7 Pro.
All of them can join and logon domain to samba PDC + LDAP.

FYI, the windows 7 clients are already hacked at registry settings:
[HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters]
"DNSNameResolutionRequired"=dword:
"DomainCompatibilityMode"=dword:0001

When I am creating user account longer than 20 characters, eg. 
projcontrol.sect.head,
something happens. On Windows XP Pro, that user can logon domain smoothly but on
Windows 7 Pro the user can't logon domain.

It takes some time waiting to logon then windows 7 says:
"The Local Session Manager service failed the logon.
The data area passed to a system call is too small."

Log samba for that pc:

  check_ntlm_password:  Checking password for unmapped user 
[DOMAIN1]\[projcontrol.sect.head]@[NB110] with the new password interface
[2011/11/10 14:05:36,  3] auth/auth.c:225(check_ntlm_password)
  check_ntlm_password:  mapped user is: 
[DOMAIN1]\[projcontrol.sect.head]@[NB110]
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:210(push_sec_ctx)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/uid.c:428(push_conn_ctx)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  2] passdb/pdb_ldap.c:571(init_sam_from_ldap)
  init_sam_from_ldap: Entry found for user: projcontrol.sect.head
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:210(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2011/11/10 14:05:36,  3] smbd/uid.c:428(push_conn_ctx)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:210(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2011/11/10 14:05:36,  3] smbd/uid.c:428(push_conn_ctx)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:210(push_sec_ctx)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2011/11/10 14:05:36,  3] smbd/uid.c:428(push_conn_ctx)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:210(push_sec_ctx)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/uid.c:428(push_conn_ctx)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2011/11/10 14:05:36,  3] auth/auth.c:271(check_ntlm_password)
  check_ntlm_password: sam authentication for user [projcontrol.sect.head] 
succeeded
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:210(push_sec_ctx)
  push_sec_ctx(99, 99) : sec_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/uid.c:428(push_conn_ctx)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:310(set_sec_ctx)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2011/11/10 14:05:36,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
[2011/11/10 14:05:36,  2] auth/auth.c:310(check_ntlm_password)
  check_ntlm_password:  authentication for user [projcontrol.sect.head] -> 
[projcontrol.sect.head] -> [projcontrol.sect.head] succeeded
[2011/11/10 14:05:36,  3] rpc_server/srv_pipe_hnd.c:343(free_pipe_context)
  free_pipe_context: destroying talloc pool of size 495
[2011/11/10 14:05:36,  3] smbd/pipes.c:325(pipe_write_andx_done)
  writeX-IPC nwritten=424
[2011/11/10 14:05:36,  3] smbd/process.c:1459(process_smb)
  Transaction 9 of length 63 (0 toread)
[2011/11/10 14:05:36,  3] smbd/process.c:1273(switch_message)
  switch message SMBreadX (pid 31441) conn 0x2b356dc248a0
[2011/11/10 14:05:36,  3] smbd/pipes.c:435(pipe_read_andx_done)
  readX-IPC min=1024 max=1024 nread=664
[2011/11/10 14:05:52,  3] smbd/process.c:1459(process_smb)
  Transaction 10 of length 45 (0 toread)
[2011/11/10 14:05:52,  3] smbd/process.c:1273(switch_message)
  switch message SMBclose (pid 31441) conn 0x2b356dc248a0
[2011/11/10 14:05:52,  3] smbd/reply.c:4488(reply_close)
  close fd=-1 fnum=7441 (numopen=1)
[2011/11/10 14:06:06,  3] smbd/process.c:1459(process_smb)
  Transaction 11 o