samba - Dec 2009 - wbinfo / Could not convert sid to gid / uid

Hello
 
My is environment: Ubuntu 8.04 LTS, Squid 2.6.18, Samba 3.0.28a
 
For Squid I need the query of a global group from Active Directory 2003.
This works beautifully, but unfortunately not always. There are global groups
which works to transform and others where it does not work.
 
Here are my entries for test:
 
# wbinfo -n nobadurl
S-1-5-21-986273330-1409306274-1541874228-9965 Domain Group (2)
 
# wbinfo -Y S-1-5-21-986273330-1409306274-1541874228-9965
Could not convert sid S-1-5-21-986273330-1409306274-1541874228-9965 to gid
 
# wbinfo -n www-Access
S-1-5-21-986273330-1409306274-1541874228-2514 Domain Group (2)

# wbinfo -Y S-1-5-21-986273330-1409306274-1541874228-2514
10011

I am a little confused. Why the conversion goes for one group but for the other
one not?
I've tried a lot, unfortunately without success.
 
Is there a log I can turn on what can help me?
What is the value wbinfo take out of the AD to convert the SID to UID or GID?
Is there another way I can figure out why the conversion does not work?
 
Thanks for your help.
 
Kind regards, G.
  		 	   		  
_________________________________________________________________
Ski-Weltcup: Alle Rennen, alle Resultate und News auf MSN Sport
http://sport.ch.msn.com/skialpin/

On Tue, Dec 8, 2009 at 7:55 AM, Georg Roelli <roellig at hotmail.com>
wrote:
>
> Hello
>
> My is environment: Ubuntu 8.04 LTS, Squid 2.6.18, Samba 3.0.28a
>
> For Squid I need the query of a global group from Active Directory 2003.
> This works beautifully, but unfortunately not always. There are global
> groups which works to transform and others where it does not work.
>
> Here are my entries for test:
>
> # wbinfo -n nobadurl
> S-1-5-21-986273330-1409306274-1541874228-9965 Domain Group (2)
>
> # wbinfo -Y S-1-5-21-986273330-1409306274-1541874228-9965
> Could not convert sid S-1-5-21-986273330-1409306274-1541874228-9965 to gid
>
> # wbinfo -n www-Access
> S-1-5-21-986273330-1409306274-1541874228-2514 Domain Group (2)
>
> # wbinfo -Y S-1-5-21-986273330-1409306274-1541874228-2514
> 10011
>
> I am a little confused. Why the conversion goes for one group but for the
> other one not?
> I've tried a lot, unfortunately without success.
>
> Is there a log I can turn on what can help me?
> What is the value wbinfo take out of the AD to convert the SID to UID or
> GID?
> Is there another way I can figure out why the conversion does not work?
>
> Thanks for your help.
>
> Kind regards, G.
>
>
I would check /var/log/samba/log.winbindd or
/var/log/samba/log.wb.<DOMAIN>.
I would suspect that you may have run out of gids allocated to groups (your
rang is not big enough). The logs should help you pinpoint the problem
though.

Robert LeBlanc
Life Sciences & Undergraduate Education Computer Support
Brigham Young University