Kent Wick
2006-Apr-26  14:10 UTC
[Samba] Many msgs log.winbindd about "group xxxxx in domain yyyyy does not exist"
I am seeing many, many msgs in log.winbindd with the following text:
[2006/04/14 08:54:29, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255)
  group system in domain AIXSAMBA does not exist
Would anybody be able to point me in the right direction to determine what this
is complaining about?
One area I do not understand is why it is complaining about AIXSAMBA (the
NETBIOS name).
There is an entry in /etc/group for the "system" group (GID = 0).
I do have some directories in one of the samba shares with an acl set as
follows:
*
* ACL_type   AIXC
*
attributes: 
base permissions
    owner(root):  rwx
    group(win_domain_users):  rwx
    others:  r-x
extended permissions
    enabled
      permit  rwx  g:system
Environment:
AIX 5.3:  long names enabled (31 char including ending zero), using pam for
authentication
Samba 3.0.22 (compiled from source), configure options were:
    --with-pam --with-acl-support --with-aio-support --with-winbind
smb.conf contents:
[global]
        workgroup = ERSSECURITY
        netbios name = AIXSAMBA
        server string = Samba3
        security = DOMAIN
        log file = /usr/local/samba/var/log.%m
        log level = 1
        algorithmic rid base = 500000
        winbind uid = 100001-500000
        winbind gid = 100001-500000
[denali_d]
        path = /samba/denali01
        acl group control = yes
        create mask = 0775
        directory mask = 2775
#       force group = win_domain_cntlr
#       inherit acls = yes
        inherit permissions = yes
        read only = no
        writeable = yes
        guest ok = no
        admin users = @win_domain_admin
[denali_f]
        path = /samba/denali02
        acl group control = yes
        create mask = 0775
        directory mask = 2775
        force group = win_domain_admin
#       inherit acls = yes
        inherit permissions = yes
        read only = no
        writeable = yes
        guest ok = no
        admin users = @win_domain_admin
Results from wbinfo -g:
BUILTIN\system operators
BUILTIN\administrators
followed by all the groups in the WinNT PDC domain.
Results from "net groupmap list":
System Operators (S-1-5-32-549) -> win_sys_oper
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Controllers (S-1-5-21-1748253822-1525897820-1959552931-3641) ->
win_domain_cntlr
Domain Admins (S-1-5-21-3484108990-1107034133-219603564-512) ->
win_domain_admin
Domain Guests (S-1-5-21-3484108990-1107034133-219603564-514) -> -1
Power Users (S-1-5-32-547) -> -1
Domain Users (S-1-5-21-3484108990-1107034133-219603564-513) ->
win_domain_users
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> win_administrator
Account Operators (S-1-5-32-548) -> -1
Backup Operators (S-1-5-32-551) -> -1
Users (S-1-5-32-545) -> -1
The "win_xxxxx" groups above are in the /etc/group file as:
win_sys_oper:!:5001:
win_domain_admin:!:5002:user1,user2,user3,user4
win_administrator:!:5003:user1,user2
win_domain_users:!:5004:user5,user6,user7,user3,user1,usert,user2,user8
win_domain_cntlr:!:5005:
Thanks for any assistance/advice that y'all can provide.
K Wick, Texas Emp Retirement Syst
Phone: 512-867-7325
Apparently Analagous Threads
- Windows 2000 Terminal Server Environment
- 6393049 in.ndpd[XXXXX]: phyint_init_from_k: SIOCSLIFLNKINFO (interface ip6.tunN): Invalid argument
- len xxxxx deyond eof at 8192
- "Couldn't load variables.txt?aldope=xxxxx "
- child xxxxx (imap) returned error 83 (Out of memory)
