samba - Jun 2007 - could not get methods for backend rid

Hello everybody.
When I try to create a local group with this command:

net sam createlocalgroup ciccio -d 100

I get this error:

[2007/06/29 15:03:46, 10]
groupdb/mapping.c:pdb_default_create_alias(447)
  Trying to create alias ciccio
[2007/06/29 15:03:46, 10] passdb/lookup_sid.c:lookup_name(64)
  lookup_name: ciccio = (domain), ciccio (name)
[2007/06/29 15:03:46, 10]
passdb/util_wellknown.c:lookup_wellknown_name(154)
  map_name_to_wellknown_sid: looking up ciccio
[2007/06/29 15:03:46, 10]
passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1363)
  getsampwnam (smbpasswd): search by name: ciccio
[2007/06/29 15:03:46, 10] passdb/pdb_smbpasswd.c:startsmbfilepwent(230)
  startsmbfilepwent_internal: opening file /etc/samba/private/smbpasswd
[2007/06/29 15:03:46, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(585)
  getsmbfilepwent: end of file reached.
[2007/06/29 15:03:46, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(347)
  endsmbfilepwent_internal: closed password file.
[2007/06/29 15:03:46, 3] groupdb/mapping.c:pdb_default_create_alias(463)
  Could not get a gid out of winbind
[2007/06/29 15:03:46, 10] intl/lang_tdb.c:lang_tdb_init(138)
  lang_tdb_init: /usr/lib/samba/en_US.msg: No such file or directory
Creating ciccio failed with NT_STATUS_ACCESS_DENIED
[2007/06/29 15:03:46, 2] utils/net.c:main(1032)
  return code = -1

Also /var/log/samba/log.winbindd-idmap report
this message:

[2007/06/29 14:59:27, 1] nsswitch/idmap.c:idmap_init(343)
  Initializing idmap domains
[2007/06/29 14:59:27, 0] nsswitch/idmap.c:idmap_init(413)
  ERROR: Could not get methods for backend rid
[2007/06/29 14:59:27, 0] nsswitch/idmap.c:idmap_init(657)
  Aborting IDMAP Initialization ...

Any hint?

This is samba 3.0.25b with this smb.conf:

[global]
   workgroup = domain

   server string = Samba on Slackware Linux

  winbind enum users = no
  winbind enum groups = no
  idmap alloc backend = rid
  idmap alloc config:range = 10000 - 50000
  idmap domains = trusted-domain domain CALIMERO
  idmap config trusted-domain:backend      = rid
  idmap config trusted-domain:base_rid     = 1000
  idmap config trusted-domain:range        = 10000 - 24999
  idmap config domain:backend  = rid
  idmap config domain:base_rid = 1000
  idmap config domain:range    = 25000 - 39999
  idmap config CALIMERO:backend  = rid
  idmap config CALIMERO:base_rid = 1000
  idmap config CALIMERO:range    = 40000 - 49999
   security = domain
   log file = /var/log/samba/samba.%m
        syslog = 0
   max log size = 50
   password server = hal9000
   socket options = TCP_NODELAY
   wins server = 172.16.1.16
   dns proxy = no
[tmp]
   comment = Temporary file space
   path = /tmp
   read only = no
   public = yes

[AAA]
    path = /tmp/AAA
    public = no
    writable = yes
    force create mode = 0660
    force directory mode = 0770

On Fri, 2007-06-29 at 15:33 +0200, Marco Berizzi wrote:
>   winbind enum users = no
>   winbind enum groups = no
>   idmap alloc backend = rid
>   idmap alloc config:range = 10000 - 50000
You cannot use the rid backend as an alloc backend.
So far the only 2 usable backends for alloc are tdb and ldap.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra@samba.org
http://samba.org

simo wrote:
> On Fri, 2007-06-29 at 15:33 +0200, Marco Berizzi wrote:
>
> >   winbind enum users = no
> >   winbind enum groups = no
> >   idmap alloc backend = rid
> >   idmap alloc config:range = 10000 - 50000
>
> You cannot use the rid backend as an alloc backend.
> So far the only 2 usable backends for alloc are tdb and ldap.
Thanks Simo,

but I get this error if I switch to tdb:

[2007/06/29 16:13:53, 0] passdb/pdb_interface.c:pdb_new_rid(1066)
  Trying to allocate a RID when algorithmic RIDs are active
[2007/06/29 16:13:53, 0] groupdb/mapping.c:pdb_default_create_alias(468)
  Could not allocate a RID -- wasted a gid :-(
[2007/06/29 16:13:53, 10] intl/lang_tdb.c:lang_tdb_init(138)
  lang_tdb_init: /usr/lib/samba/en_US.msg: No such file or directory
Creating ciccio failed with NT_STATUS_ACCESS_DENIED
[2007/06/29 16:13:53, 2] utils/net.c:main(1032)
  return code = -1

Here is the relevant smb.conf part:

  idmap alloc backend = tdb
  idmap alloc config:range = 10000 - 50000
  idmap domains = domain trusted-domain CALIMERO
  idmap config domain:backend      = tdb
  idmap config domain:range        = 10000 - 24999
  idmap config trusted-domain:backend  = tdb
  idmap config trusted-domain:range    = 25000 - 39999
  idmap config CALIMERO:backend  = tdb
  idmap config CALIMERO:range    = 40000 - 49999