enterprise-support team mailing list archive

[Daniel Schwarzloh <1954342@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

After an unattended upgrade to samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.26 on
our fileserver, clients are not able to establish a connection to samba-
shares. The fileserver serves as a domain member server with an ldap on
a different machine (see output of testparm below).

Given the correct login credentials, the client responds with: 
tree connect failed: NT_STATUS_ACCESS_DENIED
and the client specific samba-logfile on the fileserver will show:
 [2021/12/09 15:04:29.783978,  0] ../source3/auth/auth_util.c:1259(check_account)
    check_account: Failed to convert SID S-1-2-34-5678910-11121314-15161718-192021 to a UID (dom_user[MYDOMAIN\myusername])

A wrong password in a client throws:
session setup failed: NT_STATUS_LOGON_FAILURE

The config was working fine until the unattended upgrade from samba
2:4.7.6+dfsg~ubuntu-0ubuntu2.23 to 2:4.7.6+dfsg~ubuntu-0ubuntu2.26

I have tried to reproduce the behaviour on an Ubuntu 20.04.3 LTS with
samba 4.13.14 and ran into the same error.

This is the testparm output of the fileserver:
# Global parameters
[global]
	client min protocol = default
	dns proxy = No
	log file = /var/log/samba/log.%m
	map to guest = Bad User
	max log size = 1000
	pam password change = Yes
	panic action = /usr/share/samba/panic-action %d
	passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
	passwd program = /usr/bin/passwd %u
	password server = 12.345.678.9
	security = DOMAIN
	server min protocol = SMB2
	server role = member server
	server string = MYDOMAIN Fileserver
	syslog = 0
	unix extensions = No
	unix password sync = Yes
	usershare allow guests = Yes
	workgroup = WG_TECH
	idmap config * : backend = tdb
	veto files = /someVetoFile/moreVetoFiles/
	wide links = Yes

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to samba in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/1954342

Title:
  Client authentication error "Failed to convert SID ... to a PID"

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1954342/+subscriptions