Hi,
I am running a couple of Samba / LDAP servers. While they all do work
fine, I get a message like this on all of them when I run pdbedit -L -v:
Unix username: administrator
NT username: administrator
Account Flags: [UX ]
User SID: S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-21000
init_group_from_ldap: Entry found for group: 512
lookup_global_sam_rid: looking up RID 512.
ldapsam_getsampwsid: Unable to locate SID
[S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-512] count=0
init_group_from_ldap: Entry found for group: 512
lookup_rids: Domain Admins:2
Primary Group SID: S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-512
Full Name: Administrator
I thought the "unable to locate SID message" would vanish after
indexing slapd's database, but it does not. I copied the following
settings for the index from the Samba Howto:
# Indices to maintain
## required by OpenLDAP
index objectclass eq
index cn pres,sub,eq
index sn pres,sub,eq
## required to support pdb_getsampwnam
index uid pres,sub,eq
## required to support pdb_getsambapwrid()
index displayName pres,sub,eq
## uncomment these if you are storing posixAccount and
## posixGroup entries in the directory as well
index uidNumber eq
index gidNumber eq
index memberUid eq
index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
index default sub
This is a new install, which is not in use yet. It is running Samba
3.0.28. The following group mappings are setup on the server:
Domain Admins (S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-512) -> Domain
Admins
Domain Users (S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-513) -> Domain Users
Domain Guests (S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-514) -> Domain
Guests
Domain Computers (S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-515) ->
Domain Computers
Administrators (S-1-5-32-544) -> Administrators
Account Operators (S-1-5-32-548) -> Account Operators
Print Operators (S-1-5-32-550) -> Print Operators
Backup Operators (S-1-5-32-551) -> Backup Operators
Replicators (S-1-5-32-552) -> Replicators
Thanks in advance.
