samba - Jul 2006 - Problem with 3.0.23 upgrade from 3.0.22 with rfc2307 patch

I have upgraded one of my servers from a 3.0.22 implementation using the 
rfc2307 patch I supplied some months ago to the 3.0.23 release. I am now 
getting some unexplaned failures and would like some pointers as to 
where to start looking.

I am getting the following logged in the samba logs when trying to start 
the servers.

zebra.log:  Sid S-1-5-32-544 -> BUILTIN\Administrators(4)
zebra.log:  create_local_nt_token: Failed to create 
BUILTIN\Administrators group!

I am also getting the following in the log.winbindd-idmap file.

[2006/07/18 11:41:33, 1] sam/idmap_ad.c:ad_idmap_get_id_from_sid(314)  
ad_idmap_get_id_from_sid: ads_pull_uint32: could not read attribute 
'gidNumber'

I have gidNumber defined for all Unix users and all of their groups and 
this has been working fine until now. I can access the user homedrive 
OK, but this failure is occuring when I try to access a share protected 
by the group access declaration ... e.g.

[CoherentWebsites]
        comment = Coherent Technology Website Data
        valid users = @cohtech
        writeable = yes
        path = /var/www/coherent/websites

Anybody able to suggest where I should start looking or any additional 
log information that might help diagnose.

-- 

Howard Wilkinson

	

Phone:

	

+44(20)76907075

Coherent Technology Limited

	

Fax:

	

 

23 Northampton Square,

	

Mobile:

	

+44(7980)639379

London, United Kingdom, EC1V 0HL

	

Email:

	

howard@cohtech.com

> -----Original Message-----
> From: samba-bounces+bob.gautier=rabobank.com@lists.samba.org 
> [mailto:samba-bounces+bob.gautier=rabobank.com@lists.samba.org
] On Behalf Of Howard Wilkinson
> Sent: 18 July 2006 11:50
> To: samba@lists.samba.org
> Subject: [Samba] Problem with 3.0.23 upgrade from 3.0.22 with 
> rfc2307 patch
> 
> I have upgraded one of my servers from a 3.0.22 
> implementation using the
> rfc2307 patch I supplied some months ago to the 3.0.23 
> release. I am now getting some unexplaned failures and would 
> like some pointers as to where to start looking.
The rfc2307 schema compatibility in the 'official' 3.0.23 version has to
be turned on in smb.conf with

	winbind nss info = rfc2307

-- that might be something your older code did automatically.

Bob G
 
_____________________________________________________________

This email (including any attachments to it) is confidential, legally
privileged, subject to copyright and is sent for the personal attention of the
intended recipient only. If you have received this email in error, please advise
us immediately and delete it. You are notified that disclosing, copying,
distributing or taking any action in reliance on the contents of this
information is strictly prohibited. Although we have taken reasonable
precautions to ensure no viruses are present in this email, we cannot accept
responsibility for any loss or damage arising from the viruses in this email or
attachments. We exclude any liability for the content of this email, or for the
consequences of any actions taken on the basis of the information provided in
this email or its attachments, unless that information is subsequently confirmed
in writing. If this email contains an offer, that should be considered as an
invitation to treat.
_____________________________________________________________