ClearFoundation Tracker - ClearOS
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0007611ClearOSapp-samba-directory - Samba Directorypublic2016-03-07 14:432018-10-30 18:28
Reporteruser2 
Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
StatusclosedResolutionopen 
PlatformOSOS Version
Product Version7.2.0 
Target VersionFixed in Version 
Summary0007611: Group listing issue
DescriptionWe use samba directory. After switching to it, I noticed that /app/groups stopped working and did not show any groups, although it was possible to add new groups through it.

By inspecting the code, I have found that in /usr/clearos/apps/samba_directory/libraries/Group_Manager_Driver.php, function _get_details_from_directory(), wbinfo -g output is used to filter out groups fetched from Samba AD. That is clearly wrong because non of the group names match, resulting in invalid list.

My fix was simply to comment out lines 269-272:

// if (! in_array($group_name, $valid_list)) {
// $entry = $this->ldaph->next_entry($entry);
// continue;
// }
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2016-03-07 14:43user2New Issue
2016-03-07 14:43user2Statusnew => acknowledged
2016-03-07 14:44user2Note Added: 0002781
2016-08-26 17:25user2Target Version7.2.0 Updates =>
2018-10-30 18:28user2Note Added: 0008351
2018-10-30 18:28user2Statusacknowledged => closed

Notes
(0002781)
user2   
2016-03-07 14:44   
# wbinfo -g
enterprise read-only domain controllers
domain admins
domain users
domain guests
domain computers
domain controllers
schema admins
enterprise admins
group policy creator owners
read-only domain controllers
dnsupdateproxy
openvpn_plugin
user_certificates_plugin
web_proxy_plugin

# samba-tool group list
ldb_wrap open of secrets.ldb
Allowed RODC Password Replication Group
Enterprise Read-Only Domain Controllers
Denied RODC Password Replication Group
Pre-Windows 2000 Compatible Access
Windows Authorization Access Group
Certificate Service DCOM Access
Network Configuration Operators
Terminal Server License Servers
Incoming Forest Trust Builders
Read-Only Domain Controllers
Group Policy Creator Owners
Performance Monitor Users
Cryptographic Operators
user_certificates_plugin
Distributed COM Users
Performance Log Users
Remote Desktop Users
Account Operators
Event Log Readers
RAS and IAS Servers
Backup Operators
Domain Controllers
Server Operators
Enterprise Admins
Print Operators
Administrators
Domain Computers
web_proxy_plugin
Cert Publishers
DnsUpdateProxy
openvpn_plugin
Domain Admins
Domain Guests
Schema Admins
Domain Users
Replicator
IIS_IUSRS
DnsAdmins
Guests
Users
(0008351)
user2   
2018-10-30 18:28   
Implementation has changed.