samba - Dec 2003 - Problem with SID

Hello all

I have a Samba-3.0.0 server configured as PDC running agains openldap.
So I have an entry of the form:
sambaSID    S-1-5-21-xxxxx-yyyyy-zzzz-rid
in my dircectory

If I check the properties of a file under Windows on the PDC I get the
information all right displaying the owner
of the file as: user[Domain\user]

Now I have a couple of other Samba-3.0.0 servers which are not configured
as PDC/BDC or whatever but are verifying
the user information against LDAP also. Access rights to shares etc. work
fine on those servers, the only thing
ist that when I look in windows at the owner of a file I get "
S-1-5-21-xxxxx-yyyyy-zzzz-rid" and not
user [server-name\user].
Because I do not know in advance what users will have to join the domain
every user has a "sambaSID" entry with
the SID of the PDC.
I didn't have the problem with 2.2.8a in combination with LDAP.
As far as I remember ther was no sambaSID such attribute in the 2.2.x LDAP
scheme.

Anyone knows how to solve that Problem??

Help is greatly appreciated.



Best regards
Robert Gehr

"What one man can invent, another can discover"
                                                    Sherlock Holmes
=======================================web2CAD AG
Emailfabrikstr. 12
92224 Amberg / Germany
visit: http://www.web2cad.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

robert.gehr@web2cad.de wrote:
|
| I have a Samba-3.0.0 server configured as PDC running agains openldap.
| So I have an entry of the form:
| sambaSID    S-1-5-21-xxxxx-yyyyy-zzzz-rid
| in my dircectory
|
| If I check the properties of a file under Windows on the PDC I get the
| information all right displaying the owner
| of the file as: user[Domain\user]
|
| Now I have a couple of other Samba-3.0.0 servers which are not configured
| as PDC/BDC or whatever but are verifying
| the user information against LDAP also. Access rights to shares etc. work
| fine on those servers, the only thing
| ist that when I look in windows at the owner of a file I get "
| S-1-5-21-xxxxx-yyyyy-zzzz-rid" and not
| user [server-name\user].

This is fixed in 3.0.1rc2 by running winbindd on the
domain member servers and setting 'winbind trusted domains
only = yes" in smb.conf.  I'm assuming that you UNIX accounts
are shared among all Samba servers somehow (e.g. NIS or LDAP).


- --
cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard            ------------------------- http://www.hp.com
~ SAMBA Team                 ---------------------- http://www.samba.org
~ GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot
(2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/2Kd6IR7qMdg1EfYRAmQaAJ9WVp29sGywuc/QB7SPE3OsrD1HsgCgm63v
DcwXI4grjW0YxjBNg3Lt9JM=J+/0
-----END PGP SIGNATURE-----