Can`t su or ssh with russian (contain cyrillic symbols) domain usernames
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
likewise-open (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: likewise-open
Description: Ubuntu 10.04 LTS
Release: 10.04
likewise-open: 5.4.0.42111-
I’ve successfully joined domain Windows Server 2003 using LikewiseOpen from Ubuntu repos, but can`t login to Ubuntu-server 10.04 with russian usernames. When I try to do it with test username (only latin symbols) - everything seems good.
I try to troubleshoot this problem step by step using guide http://
1) domainjoin-cli query
Name = eibuntu
Domain = OUR.DMN
Distinguished Name = CN=EIBUNTU,
2) When trying logon to Ubuntu, using escape the slash character with a slash character (OUR\\Петров) ;
3) clear the cache - sudo lw-ad-cache --delete-all
The cache has been emptied successfully ;
4) sudo kdestroy
kdestroy: No credentials cache found while destroying cache ;
5) service lsassd status
running (standalone: 1337) ;
6) lw-get-dc-name our.domain
Printing LWNET_DC_INFO fields:
=======
dwDomainControl
dwFlags = 1021
dwVersion = 5
wLMToken = 65535
wNTToken = 65535
pszDomainContro
pszDomainContro
pucDomainGUID(hex) = 51 AC 8B FE B2 85 3C 4B 9C 73 19 B0 25 11 69 9D
pszNetBIOSDomai
pszFullyQualifi
pszDnsForestName = our.dmn
pszDCSiteName = Default-
pszClientSiteName = Default-
pszNetBIOSHostName = DC
pszUserName = <EMPTY>
The result shows the correct domain controller name and IP address ;
7) lw-find-
User info (Level-0):
=======
Name: OUR\Петров
SID: S-1-5-21-
Uid: 58208606
Gid: 58196481
Gecos: Петров Александр Алексеевич
Shell: /bin/bash
Home dir: /home/likewise-
Logon restriction: NO
8) lw-get-status
LSA Server Status:
Compiled daemon version: 5.0.0.0
Packaged product version: 5.4.0.42111
Uptime: 0 days 15 hours 18 minutes 26 seconds
[Authentication provider: lsa-activedirec
Status: Online
Mode: Un-provisioned
Domain: OUR.DMN
Forest: OUR.DMN
Site: Default-
Online check interval: 300 seconds
[Trusted Domains: 2]
.......
9) su our\\Петров
And here we got trouble:
su: Authentication failure
In auth.log I see error:
eibuntu su[2530]: [module:
eibuntu su[2530]: pam_authenticate: Authentication failure
eibuntu su[2530]: FAILED su for our\Петров by ubadmin
eibuntu su[2530]: - /dev/pts/1 ubadmin:our\Петров
In daemon.log:
eibuntu lsassd[1337]: 0xb1fb2b70:Failed to authenticate user (name = ‘our\Петров’)
-> error = 40067, symbol = LW_ERROR_
10) well, I try to test ssh:
ssh our\\Петров@
In auth.log:
eibuntu sshd[13675]: [module:
eibuntu sshd[13595]: error: PAM: Authentication failure for our\\\320\
In daemon.log:
eibuntu lsassd[1337]: 0xb1fb2b70:Failed to authenticate user (name = ‘our\Петров’) ->
error = 40067, symbol = LW_ERROR_
Maybe, it`s not involved with impossibility to login, but it is clear that something wrong with it...
P.S. I posted this bug as well on Likewise forum: http://
summary: |
- Can`t su or ssh with with russian (contain cyrillic symbols) domain - usernames + Can`t su or ssh with russian (contain cyrillic symbols) domain usernames |
description: | updated |
Changed in likewise-open (Ubuntu): | |
status: | New → Confirmed |
Thanks to help memeber of Likewise forum, was found workaround this bug: www.likewise. com/community/ index.php/ forums/ viewthread/ 743/#2103
http://
I`ve set proper locale according to him advice in /usr/lib/ likewise- open/init- base.sh (in my opinion, script that starting up lwsm)
LC_ALL=ru_UA.UTF8
LC_CTYPE=ru_UA.UTF8
export LC_ALL
export LC_CTYPE
and now su & ssh with cyrillic names works!