just stumbled across this when looking for the cause of my own
log clutter . . .
On Mon, Nov 28, 2005 at 08:53:08PM +0000, Jason Gerfen wrote:
> I am recieving this error in the logs after upgrading the samba packages
> on a SuSE 9.3 box to Samba-3.0.21rc1. How can I resolve this?
>
> [2005/11/28 08:46:01, 0] lib/util_sid.c:string_to_sid(285)
> string_to_sid: Sid S-0-0 is not in a valid format.
> [2005/11/28 08:46:01, 0] nsswitch/winbindd_util.c:trustdom_recv(259)
> Got invalid trustdom response
i get the same thing when the trusted domain is an MIT Kerberos 5
realm. apparently, the DC sensibly sends back a NULL SID for lack
of anything better to provide in connection with such a trust. back
before 3.0.20 or so, winbindd would ignore the SIDs returned by the
DC in the enumeration, stash just the names and go back and ask for
the SIDs by name later. i guess that's changed and, hence, why this
message shows up. i don't think it's anything to be worried about,
or at least i don't plan to, though maybe a change to
nsswitch/winbindd_util.c:trustdom_recv() to look for this case and
skip it without comment would be in order