Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deploying smbd+winbindd in a pod requires shared net namespace #19

Open
phlogistonjohn opened this issue Jan 28, 2021 · 0 comments
Open
Labels
challenges Something hit while containerizing samba may or may not be a bug

Comments

@phlogistonjohn
Copy link
Collaborator

Currently, when using smbd and winbindd in tandem to provide shares as a domain member the running containers must share a net namespace. smbd fails to start when the net namespace is not share. Errors are simliar to:

Security token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
Failed to fetch domain sid for ZZZ-BEST
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
Security token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
Could not find map for sid S-1-5-32-544
create_builtin_administrators: Failed to create Administrators
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
Failed to check for local Administrators membership (NT_STATUS_INVALID_PARAMETER_MIX)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
Security token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
Could not find map for sid S-1-5-32-545
create_builtin_users: Failed to create Users
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
Security token: (NULL)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
Could not find map for sid S-1-5-32-546
create_builtin_guests: Failed to create Guests
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
Failed to check for local Guests membership (NT_STATUS_INVALID_PARAMETER_MIX)
create_local_token failed: NT_STATUS_INVALID_PARAMETER_MIX
ERROR: failed to setup guest info.

This is a minor issue as a shared net namespace may be needed for other aspects but I thought it was worth logging it.

@phlogistonjohn phlogistonjohn added the challenges Something hit while containerizing samba may or may not be a bug label Feb 3, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
challenges Something hit while containerizing samba may or may not be a bug
Projects
None yet
Development

No branches or pull requests

1 participant