Dirk Hennrichs
2004-Jun-16 07:09 UTC
[Samba] _net_sam_logon: user LINUX.DOM\Administrator has user sid S-1-5-21-3745475611-740728939-4060410587-2988
I want to set up a PDC for 250 Users with SuSE Linux 9.0 and Samba 3.0.4 But when I try to log in as Administrator I get the error message "A device attached to the system is not functioning" Log Error Message: =================[2004/06/16 08:10:03, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1397) failed to decode PDU [2004/06/16 08:10:03, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605) process_request_pdu: failed to do schannel processing. [2004/06/16 08:10:03, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(713) _net_sam_logon: user LINUX.DOM\Administrator has user sid S-1-5-21-3745475611-740728939-4060410587-2988 but group sid S-1-5-32-547. The conflicting domain portions are not supported for NETLOGON calls net groupmap list: =================System Operators (S-1-5-32-549) -> root Replicators (S-1-5-32-552) -> root Guests (S-1-5-32-546) -> nobody Power Users (S-1-5-32-547) -> users Print Operators (S-1-5-32-550) -> root Administrators (S-1-5-32-544) -> root Account Operators (S-1-5-32-548) -> root Domain Users (S-1-5-21-3745475611-740728939-4060410587-513) -> users Domain Admins (S-1-5-21-3745475611-740728939-4060410587-512) -> root Backup Operators (S-1-5-32-551) -> root Users (S-1-5-32-545) -> users Domain Guests (S-1-5-21-3745475611-740728939-4060410587-514) -> nobody After that I deleted the file group_mapping.tdb, and login is OK. But that cannot be the solution for this problem, because now, all nt-groups are not matched to one unix-group, net groupmap list shows that all groups are matched to unixgroup -1 My aim was to set up user root as the Administrator for the domain, and that all users in unix-group root are "Domain Admins". So I set "username map /etc/user.map" in smb.conf, and user.map shows "root = Administrator". Now, when I added a user with the User-Manager, I get the error message: "Group-Name cannot be found !" Can somebody help me with this ? Greetings Dirk