Mike Davis
2007-Aug-07 15:49 UTC
[Samba] Issue when migrating samba domain server to new hardware and samba version
I?m setting up our new server that will handle file storage. The new system is redhat running samba 3.0.23c. We currently have this same service running on DEC server running version 3.0.20 without any issues. Here is the smb.conf for both? [global] passdb backend = ldapsam:ldap://xxxxxxxxx ldap suffix = dc=temple,dc=edu name resolve order = wins bcast hosts ldap machine suffix = ou=Computers ldap user suffix = ou=People ldap admin dn = xxxxx ldap ssl = start tls workgroup = ACSLABS wins server = xxxx server string = "TUfiles" security = domain #log file = /var/log/samba.log log level = 5 Now I think something is messed up with the primary group sids? Attempting to register passdb backend ldapsam Successfully added passdb backend 'ldapsam' Attempting to register passdb backend ldapsam_compat Successfully added passdb backend 'ldapsam_compat' Attempting to register passdb backend NDS_ldapsam Successfully added passdb backend 'NDS_ldapsam' Attempting to register passdb backend NDS_ldapsam_compat Successfully added passdb backend 'NDS_ldapsam_compat' Attempting to register passdb backend smbpasswd Successfully added passdb backend 'smbpasswd' Attempting to register passdb backend tdbsam Successfully added passdb backend 'tdbsam' Attempting to find an passdb backend to match ldapsam:ldap://xxxxxxxx/ (ldapsam) Found pdb backend ldapsam smbldap_search_domain_info: Searching for:[(& (objectClass=sambaDomain)(sambaDomainName=MYBACKPACK-BE))] smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(& (objectClass=sambaDomain)(sambaDomainName=MYBACKPACK-BE))], scope => [2] The connection to the LDAP server was closed smbldap_open_connection: connection opened ldap_connect_system: succesful connection to the LDAP server The LDAP server is succesfully connected pdb backend ldapsam:ldap://xxxxxxxxx/ has a valid init Netbios name list:- my_netbios_names[0]="MYBACKPACK-BE" Attempting to find an passdb backend to match ldapsam:ldap://xxxxxxxxxx/ (ldapsam) Found pdb backend ldapsam smbldap_search_domain_info: Searching for:[(& (objectClass=sambaDomain)(sambaDomainName=MYBACKPACK-BE))] smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(& (objectClass=sambaDomain)(sambaDomainName=MYBACKPACK-BE))], scope => [2] The connection to the LDAP server was closed smbldap_open_connection: connection opened ldap_connect_system: succesful connection to the LDAP server The LDAP server is succesfully connected pdb backend ldapsam:ldap://xxxxxxx/ has a valid init smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(& (uid=nobody)(objectclass=sambaSamAccount))], scope => [2] init_sam_from_ldap: Entry found for user: nobody Home server: mybackpack-be Home server: mybackpack-be Opening cache file at /var/cache/samba/login_cache.tdb Unix username: nobody NT username: nobody Account Flags: [U ] User SID: S-1-5-21-1671181371-3057104424- 2529773789-501 smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(& (objectClass=sambaGroupMapping)(gidNumber=99))], scope => [2] ldapsam_getgroup: Did not find group Primary Group SID: S-1-5-21-424765346-3208026686- 854402210-513 Full Name: Nobody Home Directory: \\mybackpack-be\nobody HomeDir Drive: Logon Script: Profile Path: \\mybackpack-be\nobody\profile Domain: MYBACKPACK-BE Account desc: Workstations: Munged dial: Logon time: 0 Logoff time: Mon, 18 Jan 2038 22:14:07 EST Kickoff time: Mon, 18 Jan 2038 22:14:07 EST Password last set: Wed, 01 Aug 2007 14:39:16 EDT Password can change: Wed, 01 Aug 2007 14:39:16 EDT Password must change: Mon, 18 Jan 2038 22:14:07 EST Last bad password : 0 Bad password count : 0 Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF This os what I see in the logs during startup.. only a snippet [2007/08/06 12:25:03, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2 [2007/08/06 12:25:03, 5] auth/auth_util.c:debug_nt_user_token (448) NT user token: (NULL) [2007/08/06 12:25:03, 5] auth/auth_util.c:debug_unix_user_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2007/08/06 12:25:03, 5] lib/smbldap.c:smbldap_search_ext (1179) smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(&(sambaSID=S-1-5-21-424765346-3208026686-854402210-513) (objectclass=sambaSamAccount))], scope => [2] [2007/08/06 12:25:03, 4] passdb/pdb_ldap.c:ldapsam_getsampwsid(1491) ldapsam_getsampwsid: Unable to locate SID [S-1-5-21- 424765346-3208026686-854402210-513] count=0 [2007/08/06 12:25:03, 5] lib/smbldap.c:smbldap_search_ext (1179) smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-21- 424765346-3208026686-854402210-513))], scope => [2] [2007/08/06 12:25:03, 4] passdb/pdb_ldap.c:ldapsam_getgroup (2213) ldapsam_getgroup: Did not find group [2007/08/06 12:25:03, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1 [2007/08/06 12:25:03, 5] passdb/pdb_interface.c:lookup_global_sam_rid(1540) Can't find a unix id for an unmapped group [2007/08/06 12:25:03, 3] smbd/sec_ctx.c:pop_sec_ctx(339) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/08/06 12:25:03, 0] passdb/passdb.c:lookup_global_sam_name(598) User nobody with invalid SID S-1-5-21-1671181371- 3057104424-2529773789-501 in passdb [2007/08/06 12:25:03, 5] lib/smbldap.c:smbldap_search_ext (1179) smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=99))], scope => [2] [2007/08/06 12:25:03, 4] passdb/pdb_ldap.c:ldapsam_getgroup (2213) ldapsam_getgroup: Did not find group [2007/08/06 12:25:03, 5] lib/smbldap.c:smbldap_search_ext (1179) smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(&(objectClass=sambaGroupMapping)(gidNumber=999))], scope => [2] [2007/08/06 12:25:03, 4] passdb/pdb_ldap.c:ldapsam_getgroup (2213) ldapsam_getgroup: Did not find group [2007/08/06 12:25:03, 5] lib/smbldap.c:smbldap_search_ext (1179) smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-544))], scope => [2] [2007/08/06 12:25:03, 4] passdb/pdb_ldap.c:ldapsam_getgroup (2213) ldapsam_getgroup: Did not find group [2007/08/06 12:25:03, 5] lib/smbldap.c:smbldap_search_ext (1179) smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(&(objectClass=sambaGroupMapping)(sambaSID=S-1-5-32-545))], scope => [2] [2007/08/06 12:25:03, 4] passdb/pdb_ldap.c:ldapsam_getgroup (2213) ldapsam_getgroup: Did not find group [2007/08/06 12:25:03, 5] lib/smbldap.c:smbldap_search_ext (1179) smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(| (sambaSIDList=S-1-22-1-99)(sambaSIDList=S-1-22-2-99) (sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S- 1-5-32-546)(sambaSIDList=S-1-22-2-999)))], scope => [2] [2007/08/06 12:25:04, 0] smbd/server.c:main(960) ERROR: failed to setup guest info. Did something change in the code or am I forgetting to do something?
Apparently Analagous Threads
Wisdom of the Ancients
