AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only
  • 1.  SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Tue February 09, 2021 03:21 AM
    Hello!
    We have samba 4.12.10-1 on AIX 7.1.
    When I try to connect to a share we receive the error:
    [2021/02/09 08:54:00.461327, 2] ../../source3/auth/auth.c:329(auth_check_ntlm_password)check_ntlm_password: authentication for user [Juan_SR] -> [Juan_SR] -> [HEFAME\juan_sr] succeeded
    [2021/02/09 08:54:00.464901, 0] ../../source3/lib/system_smbd.c:226(getgroups_unix_user)get_user_groups: failed to get the unix group list
    [2021/02/09 08:54:00.464965, 1] ../../source3/auth/token_util.c:601(add_local_groups)getgroups_unix_user for user HEFAME\juan_sr failed
    [2021/02/09 08:54:00.464986, 3] ../../source3/auth/token_util.c:403(create_local_nt_token_from_info3)Failed to add local groups

    See attahced full log(level 3) and smb.conf
    This commands works:
    # wbinfo -n HEFAME\\juan_sr
    S-1-5-21-2123242984-1830168398-1557874966-2093 SID_USER (1)
    # wbinfo -S S-1-5-21-2123242984-1830168398-1557874966-209321093
    # wbinfo -r HEFAME\\juan_sr
    21093
    ...
    10001

    /etc/security/methods:
    ...
    WINBIND:
    program = /usr/lib/security/WINBIND
    options = authonly


    Thanks in advance.
    Kind Regards,
    Juan

    ------------------------------
    JUAN SANCHEZ RODRIGUEZ
    ------------------------------

    Attachment(s)

    txt
    log.ip.level3.txt   5 KB 1 version
    txt
    smb.conf.txt   1 KB 1 version


  • 2.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Tue February 09, 2021 10:46 AM
    I think this is "getgrset returning NULL" issue. Log level 10 will reveal it. 
    This is a problem that persists with the recent samba versions in AIX.
    smbd checks for the user presence locally somehow. Doing a "mkuser <username>" is a workaround for this.

    ------------------------------
    Ayappan P
    ------------------------------



  • 3.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Tue February 09, 2021 02:42 PM
    Edited by JUAN SANCHEZ RODRIGUEZ Tue February 09, 2021 02:43 PM
    Thanks @Ayappan P
    You're right. In log level 10 appears:
    [2021/02/09 20:22:37.884941, 10, pid=64684060, effective(0, 0), real(0, 0)] ../../source3/lib/system_smbd.c:46(getgrouplist_getgrset)
    getgrset returned (NULL)

    ​And If I create user at AIX level then I can access to share withour errors.

    Do you know if a new smbd versions solve this problem? If yes then I could compile it on AIX.

    Thanks in advance

    Regards,
    Juan

    ------------------------------
    JUAN SANCHEZ RODRIGUEZ
    ------------------------------



  • 4.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Wed February 10, 2021 01:36 AM
    I think this issue is not yet fixed and persists in the newer version as well.
    I opened a bug in samba community sometime back --> https://bugzilla.samba.org/show_bug.cgi?id=14230

    ------------------------------
    Ayappan P
    ------------------------------



  • 5.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Wed February 10, 2021 03:13 AM
    Thanks Ayappan, I will check it occasionally for any news regards this issue.

    Regards,
    Juan.

    ------------------------------
    JUAN SANCHEZ RODRIGUEZ
    ------------------------------



  • 6.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Mon June 21, 2021 04:23 AM
    The issue is fixed in the latest samba 4.14.4-2 uploaded in AIX Toolbox.

    ------------------------------
    Ayappan P
    ------------------------------



  • 7.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Mon June 21, 2021 04:49 AM
    Thanks a lot Ayappan. I will update it and try that all is ok.

    ------------------------------
    JUAN SANCHEZ RODRIGUEZ
    ------------------------------