Public bug reported:

After an unattended upgrade to samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.26 on
our fileserver, clients are not able to establish a connection to samba-
shares. The fileserver serves as a domain member server with an ldap on
a different machine (see output of testparm below).

Given the correct login credentials, the client responds with: 
tree connect failed: NT_STATUS_ACCESS_DENIED
and the client specific samba-logfile on the fileserver will show:
 [2021/12/09 15:04:29.783978,  0] 
../source3/auth/auth_util.c:1259(check_account)
    check_account: Failed to convert SID 
S-1-2-34-5678910-11121314-15161718-192021 to a UID 
(dom_user[MYDOMAIN\myusername])

A wrong password in a client throws:
session setup failed: NT_STATUS_LOGON_FAILURE

The config was working fine until the unattended upgrade from samba
2:4.7.6+dfsg~ubuntu-0ubuntu2.23 to 2:4.7.6+dfsg~ubuntu-0ubuntu2.26

I have tried to reproduce the behaviour on an Ubuntu 20.04.3 LTS with
samba 4.13.14 and ran into the same error.

This is the testparm output of the fileserver:
# Global parameters
[global]
        client min protocol = default
        dns proxy = No
        log file = /var/log/samba/log.%m
        map to guest = Bad User
        max log size = 1000
        pam password change = Yes
        panic action = /usr/share/samba/panic-action %d
        passwd chat = *Enter\snew\s*\spassword:* %n\n 
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
        passwd program = /usr/bin/passwd %u
        password server = 12.345.678.9
        security = DOMAIN
        server min protocol = SMB2
        server role = member server
        server string = MYDOMAIN Fileserver
        syslog = 0
        unix extensions = No
        unix password sync = Yes
        usershare allow guests = Yes
        workgroup = WG_TECH
        idmap config * : backend = tdb
        veto files = /someVetoFile/moreVetoFiles/
        wide links = Yes

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1954342

Title:
  Client authentication error "Failed to convert SID ... to a PID"

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1954342/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to