AIX Open Source

 View Only
  • 1.  SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Tue February 09, 2021 03:21 AM
    Hello!
    We have samba 4.12.10-1 on AIX 7.1.
    When I try to connect to a share we receive the error:
    [2021/02/09 08:54:00.461327, 2] ../../source3/auth/auth.c:329(auth_check_ntlm_password)check_ntlm_password: authentication for user [Juan_SR] -> [Juan_SR] -> [HEFAME\juan_sr] succeeded
    [2021/02/09 08:54:00.464901, 0] ../../source3/lib/system_smbd.c:226(getgroups_unix_user)get_user_groups: failed to get the unix group list
    [2021/02/09 08:54:00.464965, 1] ../../source3/auth/token_util.c:601(add_local_groups)getgroups_unix_user for user HEFAME\juan_sr failed
    [2021/02/09 08:54:00.464986, 3] ../../source3/auth/token_util.c:403(create_local_nt_token_from_info3)Failed to add local groups

    See attahced full log(level 3) and smb.conf
    This commands works:
    # wbinfo -n HEFAME\\juan_sr
    S-1-5-21-2123242984-1830168398-1557874966-2093 SID_USER (1)
    # wbinfo -S S-1-5-21-2123242984-1830168398-1557874966-209321093
    # wbinfo -r HEFAME\\juan_sr
    21093
    ...
    10001

    /etc/security/methods:
    ...
    WINBIND:
    program = /usr/lib/security/WINBIND
    options = authonly


    Thanks in advance.
    Kind Regards,
    Juan

    ------------------------------
    JUAN SANCHEZ RODRIGUEZ
    ------------------------------

    Attachment(s)

    txt
    log.ip.level3.txt   5 KB 1 version
    txt
    smb.conf.txt   1 KB 1 version


  • 2.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Tue February 09, 2021 10:46 AM
    I think this is "getgrset returning NULL" issue. Log level 10 will reveal it. 
    This is a problem that persists with the recent samba versions in AIX.
    smbd checks for the user presence locally somehow. Doing a "mkuser <username>" is a workaround for this.

    ------------------------------
    Ayappan P
    ------------------------------



  • 3.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Tue February 09, 2021 02:42 PM
    Edited by JUAN SANCHEZ RODRIGUEZ Tue February 09, 2021 02:43 PM
    Thanks @Ayappan P
    You're right. In log level 10 appears:
    [2021/02/09 20:22:37.884941, 10, pid=64684060, effective(0, 0), real(0, 0)] ../../source3/lib/system_smbd.c:46(getgrouplist_getgrset)
    getgrset returned (NULL)

    ​And If I create user at AIX level then I can access to share withour errors.

    Do you know if a new smbd versions solve this problem? If yes then I could compile it on AIX.

    Thanks in advance

    Regards,
    Juan

    ------------------------------
    JUAN SANCHEZ RODRIGUEZ
    ------------------------------



  • 4.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Wed February 10, 2021 01:36 AM
    I think this issue is not yet fixed and persists in the newer version as well.
    I opened a bug in samba community sometime back --> https://bugzilla.samba.org/show_bug.cgi?id=14230

    ------------------------------
    Ayappan P
    ------------------------------



  • 5.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Wed February 10, 2021 03:13 AM
    Thanks Ayappan, I will check it occasionally for any news regards this issue.

    Regards,
    Juan.

    ------------------------------
    JUAN SANCHEZ RODRIGUEZ
    ------------------------------



  • 6.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Mon June 21, 2021 04:23 AM
    The issue is fixed in the latest samba 4.14.4-2 uploaded in AIX Toolbox.

    ------------------------------
    Ayappan P
    ------------------------------



  • 7.  RE: SAMBA: "failed to get the unix group list" after successfuly authentication

    Posted Mon June 21, 2021 04:49 AM
    Thanks a lot Ayappan. I will update it and try that all is ok.

    ------------------------------
    JUAN SANCHEZ RODRIGUEZ
    ------------------------------