After upgrading from samba 3.0.22 to 3.0.23a (FC 5) i started having problems with groups and access to shares. (using winbind for group mapping) Looking in my smbd.log i found errors relating to string_to_sid: string_to_sid: Sid Domain Admins does not start with 'S-'. I tried specifying the group in different way in the smb.conf: "DOMAIN+Domain Admins" "@Domain Admins" "Domain Admins" "domain admins" etc etc When running the command: wbinfo -n "Domain Admins" S-1-5-21-1390067357-1580818891-725345543-512 Domain Group (2) I got a valid SID back. After specifying the SID in smb.conf i could get access to the shares. If anyone could shed some light on the problem it would be much appreciated, i'm new to samba so i do apologise if it's my mistake. Cheers Matt
try using fully qualified domain names micha Matthew Preskett wrote:> After upgrading from samba 3.0.22 to 3.0.23a (FC 5) i started having problems with groups and access to shares. (using winbind for group mapping) > > Looking in my smbd.log i found errors relating to string_to_sid: > > string_to_sid: Sid Domain Admins does not start with 'S-'. > > I tried specifying the group in different way in the smb.conf: > > "DOMAIN+Domain Admins" > "@Domain Admins" > "Domain Admins" > "domain admins" > > etc etc > > When running the command: > > wbinfo -n "Domain Admins" > S-1-5-21-1390067357-1580818891-725345543-512 Domain Group (2) > > I got a valid SID back. > > After specifying the SID in smb.conf i could get access to the shares. > > If anyone could shed some light on the problem it would be much appreciated, i'm new to samba so i do apologise if it's my mistake. > > Cheers Matt > > >