On Fri, 9 Dec 2016 11:11:56 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:> From: "Stefan G. Weichinger via samba" <samba at lists.samba.org> > To: samba at lists.samba.org > Subject: Re: [Samba] Samba on Debian 8; NT4 domain, win10 > Date: Fri, 9 Dec 2016 11:11:56 +0100 > Reply-To: "Stefan G. Weichinger" <lists at xunil.at> > Sender: "samba" <samba-bounces at lists.samba.org> > User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 > Thunderbird/45.5.1 > > > I am doing another classic-upgrade for another customer. > > I get: > > Importing groups > Could not add group name=Domain Admins ((68, "samldb: Account name > (sAMAccountName) 'Domain Admins' already in use!")) > Could not modify AD idmap entry for > sid=S-1-5-21-2777655458-4002997014-749295002-1006, id=0, > type=ID_TYPE_GID ((32, "Base-DN > '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found")) > Could not add posix attrs for AD entry for > sid=S-1-5-21-2777655458-4002997014-749295002-1006, ((32, "Base-DN > '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found")) > Could not add group name=Domain Guests ((68, "samldb: Account name > (sAMAccountName) 'Domain Guests' already in use!")) > Could not modify AD idmap entry for > sid=S-1-5-21-2777655458-4002997014-749295002-1008, id=65534, > type=ID_TYPE_GID ((32, "Base-DN > '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found")) > Could not add posix attrs for AD entry for > sid=S-1-5-21-2777655458-4002997014-749295002-1008, ((32, "Base-DN > '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found")) > Could not add group name=Domain Users ((68, "samldb: Account name > (sAMAccountName) 'Domain Users' already in use!")) > Could not modify AD idmap entry for > sid=S-1-5-21-2777655458-4002997014-749295002-1007, id=100, > type=ID_TYPE_GID ((32, "Base-DN > '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found")) > Could not add posix attrs for AD entry for > sid=S-1-5-21-2777655458-4002997014-749295002-1007, ((32, "Base-DN > '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found")) > Committing 'add groups' transaction to disk > > > -- why "already in use" ? > > >It looks like you have the three groups in your old system, but the upgrade will create the well known groups automatically, so your old ones are being ignored because they are 'already in use' Rowland
Am 2016-12-09 um 12:21 schrieb Rowland Penny via samba:> On Fri, 9 Dec 2016 11:11:56 +0100 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> From: "Stefan G. Weichinger via samba" <samba at lists.samba.org> >> To: samba at lists.samba.org >> Subject: Re: [Samba] Samba on Debian 8; NT4 domain, win10 >> Date: Fri, 9 Dec 2016 11:11:56 +0100 >> Reply-To: "Stefan G. Weichinger" <lists at xunil.at> >> Sender: "samba" <samba-bounces at lists.samba.org> >> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 >> Thunderbird/45.5.1 >> >> >> I am doing another classic-upgrade for another customer. >> >> I get: >> >> Importing groups >> Could not add group name=Domain Admins ((68, "samldb: Account name >> (sAMAccountName) 'Domain Admins' already in use!")) >> Could not modify AD idmap entry for >> sid=S-1-5-21-2777655458-4002997014-749295002-1006, id=0, >> type=ID_TYPE_GID ((32, "Base-DN >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found")) >> Could not add posix attrs for AD entry for >> sid=S-1-5-21-2777655458-4002997014-749295002-1006, ((32, "Base-DN >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found")) >> Could not add group name=Domain Guests ((68, "samldb: Account name >> (sAMAccountName) 'Domain Guests' already in use!")) >> Could not modify AD idmap entry for >> sid=S-1-5-21-2777655458-4002997014-749295002-1008, id=65534, >> type=ID_TYPE_GID ((32, "Base-DN >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found")) >> Could not add posix attrs for AD entry for >> sid=S-1-5-21-2777655458-4002997014-749295002-1008, ((32, "Base-DN >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found")) >> Could not add group name=Domain Users ((68, "samldb: Account name >> (sAMAccountName) 'Domain Users' already in use!")) >> Could not modify AD idmap entry for >> sid=S-1-5-21-2777655458-4002997014-749295002-1007, id=100, >> type=ID_TYPE_GID ((32, "Base-DN >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found")) >> Could not add posix attrs for AD entry for >> sid=S-1-5-21-2777655458-4002997014-749295002-1007, ((32, "Base-DN >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found")) >> Committing 'add groups' transaction to disk >> >> >> -- why "already in use" ? >> >> >> > > It looks like you have the three groups in your old system, but the > upgrade will create the well known groups automatically, so your old > ones are being ignored because they are 'already in use'understood. But the process stops after these warnings at adding a user: Adding users Importing users User root has been kept in the directory, it should be removed in favour of the Administrator user Committing 'add users' transaction to disk Adding users to groups ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: Could not add member 'S-1-5-21-2777655458-4002997014-749295002-1000' to group 'S-1-5-21-2777655458-4002997014-749295002-1006' as either group or user record doesn't exist: Base-DN '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line 1452, in run useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs) File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 824, in upgrade_from_samba3 add_users_to_group(result.samdb, g, groupmembers[str(g.sid)], logger) File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 317, in add_users_to_group raise ProvisioningError("Could not add member '%s' to group '%s' as either group or user record doesn't exist: %s" % (member_sid, group.sid, emsg)) pls advise, thanks
On Mon, 12 Dec 2016 09:04:18 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:> Am 2016-12-09 um 12:21 schrieb Rowland Penny via samba: > > On Fri, 9 Dec 2016 11:11:56 +0100 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > > >> From: "Stefan G. Weichinger via samba" <samba at lists.samba.org> > >> To: samba at lists.samba.org > >> Subject: Re: [Samba] Samba on Debian 8; NT4 domain, win10 > >> Date: Fri, 9 Dec 2016 11:11:56 +0100 > >> Reply-To: "Stefan G. Weichinger" <lists at xunil.at> > >> Sender: "samba" <samba-bounces at lists.samba.org> > >> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 > >> Thunderbird/45.5.1 > >> > >> > >> I am doing another classic-upgrade for another customer. > >> > >> I get: > >> > >> Importing groups > >> Could not add group name=Domain Admins ((68, "samldb: Account name > >> (sAMAccountName) 'Domain Admins' already in use!")) > >> Could not modify AD idmap entry for > >> sid=S-1-5-21-2777655458-4002997014-749295002-1006, id=0, > >> type=ID_TYPE_GID ((32, "Base-DN > >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found")) > >> Could not add posix attrs for AD entry for > >> sid=S-1-5-21-2777655458-4002997014-749295002-1006, ((32, "Base-DN > >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found")) > >> Could not add group name=Domain Guests ((68, "samldb: Account name > >> (sAMAccountName) 'Domain Guests' already in use!")) > >> Could not modify AD idmap entry for > >> sid=S-1-5-21-2777655458-4002997014-749295002-1008, id=65534, > >> type=ID_TYPE_GID ((32, "Base-DN > >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found")) > >> Could not add posix attrs for AD entry for > >> sid=S-1-5-21-2777655458-4002997014-749295002-1008, ((32, "Base-DN > >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found")) > >> Could not add group name=Domain Users ((68, "samldb: Account name > >> (sAMAccountName) 'Domain Users' already in use!")) > >> Could not modify AD idmap entry for > >> sid=S-1-5-21-2777655458-4002997014-749295002-1007, id=100, > >> type=ID_TYPE_GID ((32, "Base-DN > >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found")) > >> Could not add posix attrs for AD entry for > >> sid=S-1-5-21-2777655458-4002997014-749295002-1007, ((32, "Base-DN > >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found")) > >> Committing 'add groups' transaction to disk > >> > >> > >> -- why "already in use" ? > >> > >> > >> > > > > It looks like you have the three groups in your old system, but the > > upgrade will create the well known groups automatically, so your old > > ones are being ignored because they are 'already in use' > > understood. > But the process stops after these warnings at adding a user: > > Adding users > Importing users > User root has been kept in the directory, it should be removed in > favour of the Administrator user > Committing 'add users' transaction to disk > Adding users to groups > ERROR(<class 'samba.provision.ProvisioningError'>): uncaught > exception - ProvisioningError: Could not add member > 'S-1-5-21-2777655458-4002997014-749295002-1000' to group > 'S-1-5-21-2777655458-4002997014-749295002-1006' as either group or > user record doesn't exist: Base-DN > '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found > File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", > line 175, in _run > return self.run(*args, **kwargs) > File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line > 1452, in run > useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs) > File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 824, > in upgrade_from_samba3 > add_users_to_group(result.samdb, g, groupmembers[str(g.sid)], > logger) File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", > line 317, in add_users_to_group > raise ProvisioningError("Could not add member '%s' to group '%s' > as either group or user record doesn't exist: %s" % (member_sid, > group.sid, emsg)) > > pls advise, thanks > > >Who is 'S-1-5-21-2777655458-4002997014-749295002-1000' and what is 'S-1-5-21-2777655458-4002997014-749295002-1006' ? Rowland