samba - Nov 2003 - 3.0.1pre1 PDC and Win2K joining Domain

Hi All-


When I tried to join a Windows 2K workstation to my Samba 3.0 + LDAP
PDC, I was getting the error: 'No mapping between account names and
security IDs was done'. 

 

After scouring the mailing list, I found out that I wasn't the only one
with the problem, but it seems like nobody ever got an answer (publicly,
at least).  With all the configuration changes and tweaks to my server,
somehow, somewhere along the line the domain SID got changed (or I never
set it in the smbldap_conf.pm, a more likely scenario).  In any case,
once I discovered the error, I went through and changed the user and
group SID to match the domain SID (from net getlocalsid).  That done, I
tried once again to join my 2K workstation to the domain and met with
success!

 

So, if you're (still) getting that error, check your SIDs.

 

Thanks to everyone who asks the questions, and more thanks to those who
provide answers.

 

Hope this helps someone,

Mark

I am having that same problem right now, but I don't use LDAP. Any ideas? I 
have one WinXP machine working fine, but the 2nd doesn't. I'm not too 
familiar with checking SIDs.

Pat Hagge

E-Mail: pat@theewok.net
Alt. E-mail: maxrebo@mindless.com
Web: http://maxrebo.n3.net

-> Have you seen Strange Signs? -- http://www.strangesigns.org <-

---------- Original Message -----------
From: "Mark" <mark@co.robeson.nc.us>
To: <samba@lists.samba.org>
Sent: Wed, 5 Nov 2003 11:29:42 -0500
Subject: [Samba] 3.0.1pre1 PDC and Win2K joining Domain
> Hi All-
> 
> When I tried to join a Windows 2K workstation to my Samba 3.0 + LDAP
> PDC, I was getting the error: 'No mapping between account names and
> security IDs was done'.
> 
> After scouring the mailing list, I found out that I wasn't the only one
> with the problem, but it seems like nobody ever got an answer 
> (publicly, at least).  With all the configuration changes and tweaks 
> to my server, somehow, somewhere along the line the domain SID got 
> changed (or I never set it in the smbldap_conf.pm, a more likely 
> scenario).  In any case, once I discovered the error, I went through 
> and changed the user and group SID to match the domain SID (from net 
> getlocalsid).  That done, I tried once again to join my 2K 
> workstation to the domain and met with success!
> 
> So, if you're (still) getting that error, check your SIDs.
> 
> Thanks to everyone who asks the questions, and more thanks to those who
> provide answers.
> 
> Hope this helps someone,
> 
> Mark
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
------- End of Original Message -------