samba - Sep 2018 - Can't access samba because "session setup failed: NT_STATUS_INVALID_SID"

I have an instance of samba 4 where users gonna authenticate on it through
a OpenLDAP server. The user from LDAP are already configured with samba
credentials. The issue is that they are set with an SID different from the
one of my machine with samba 4, i guess it's because there was an old samba
3 in use when these users were created. When i create a new user with
"smbldap-tools", it logs in the samba correctly, but the old users
don't.
Anyways, all the users either old or new need to use this samba 4 now.
Should i change the SID of my samba instance to the old set on the old
users in order to settle this problem? What would be the best solution for
this?

Thanks in advance.

On Sun, 30 Sep 2018 16:32:38 +0000
Junior Oliveira via samba <samba at lists.samba.org> wrote:
>  I have an instance of samba 4 where users gonna authenticate on it
> through a OpenLDAP server. The user from LDAP are already configured
> with samba credentials. The issue is that they are set with an SID
> different from the one of my machine with samba 4, i guess it's
> because there was an old samba 3 in use when these users were
> created. When i create a new user with "smbldap-tools", it logs
in
> the samba correctly, but the old users don't. Anyways, all the users
> either old or new need to use this samba 4 now. Should i change the
> SID of my samba instance to the old set on the old users in order to
> settle this problem? What would be the best solution for this?
> 
> Thanks in advance.
I would suggest you stop using old outdated ways of doing things ;-)

As far as I can see 'smbldap-tools' is dead, there doesn't seem to
be a
home webpage anywhere and as such it is now unmaintained. It only
needs a perl update to break it.

We now move to Windows, Microsoft seems to be trying to stop NT4-style
domains working, this may be by accident, or on purpose, but it is
happening.

Can I suggest you upgrade to a Samba AD domain, it is easier to
maintain and works with current (and past) versions of Windows.

Rowland

Thanks Rowland,

I didn't think i was doing all of this in an outdated way (it really makes
sense, as much of the tutorials i've followed come from before 2010 and
there's barely no  recent tutorials regarding these issues).

So i'm gonna follow your suggestion. However, how can i deal with the LDAP
server? This base is big and it's a mandatory feature i need to implement
on this Samba 4, let the users log in on Samba 4 using it's credentials
from OpenLDAP server. How could i accomplish this now?

Thanks in advance again.

Em dom, 30 de set de 2018 às 17:17, Rowland Penny via samba <
samba at lists.samba.org> escreveu:
> On Sun, 30 Sep 2018 16:32:38 +0000
> Junior Oliveira via samba <samba at lists.samba.org> wrote:
>
> >  I have an instance of samba 4 where users gonna authenticate on it
> > through a OpenLDAP server. The user from LDAP are already configured
> > with samba credentials. The issue is that they are set with an SID
> > different from the one of my machine with samba 4, i guess it's
> > because there was an old samba 3 in use when these users were
> > created. When i create a new user with "smbldap-tools", it
logs in
> > the samba correctly, but the old users don't. Anyways, all the
users
> > either old or new need to use this samba 4 now. Should i change the
> > SID of my samba instance to the old set on the old users in order to
> > settle this problem? What would be the best solution for this?
> >
> > Thanks in advance.
>
> I would suggest you stop using old outdated ways of doing things ;-)
>
> As far as I can see 'smbldap-tools' is dead, there doesn't seem
to be a
> home webpage anywhere and as such it is now unmaintained. It only
> needs a perl update to break it.
>
> We now move to Windows, Microsoft seems to be trying to stop NT4-style
> domains working, this may be by accident, or on purpose, but it is
> happening.
>
> Can I suggest you upgrade to a Samba AD domain, it is easier to
> maintain and works with current (and past) versions of Windows.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>