On Tue, Apr 28, 2015 at 03:57:49PM -0400, Christopher David Howie wrote: > Package: samba > Version: 2:4.1.17+dfsg-2 > Tags: upstream, fixed-upstream > > Samba 4.1.17 appears to have a bug causing all authentication attempts > to fail (internal error NT_STATUS_NO_SUCH_USER) if the NetBIOS name of > the server is over 15 characters long. This includes the inferred name > if "netbios name" is not set in the config file and the machine's > hostname is over 15 characters long -- therefore the config may not even > be "incorrect" but authentication still break. > > This was reported upstream previously > <https://bugzilla.samba.org/show_bug.cgi?id=11008> and is fixed in a > newer Samba. The fix may need to be backported. > > A workaround is to set "netbios name" explicitly in smb.conf to a string > of 15 or fewer characters. After restarting Samba, authentication > should work as before.
FWIW The problem here is that comparing a long hostname with the NetBIOS name (which is limited to 15 characters) is broken. NetBIOS names can't be longer than 15 characters, even with the upstream patch - and samba will already truncate the netbios name if you set it to a longer name in smb.conf. [1] [1] http://www.ubiqx.org/cifs/NetBIOS.html
signature.asc
Description: Digital signature
