samba - Feb 2012 - Samba 3.5 to 3.6

Dear reader,
I tried to switch my server from samba 3.5 to 3.6. Unfortunately I was 
not successful.

The smb.conf below  works without any problems under 3.5


With 3.6.3 I get the following error:

[2012/02/23 09:32:21.669389,  1] auth/server_info.c:391(samu_to_SamInfo3)
   The primary group domain 
sid(S-1-5-21-463168302-511420122-2937072671-513) does not match the 
domain sid(S-1-5-21-706331994-863180292-319919955) for 
mos(S-1-5-21-706331994-863180292-319919955-5019)
[2012/02/23 09:32:21.669528,  0] auth/check_samsec.c:491(check_sam_security)
   check_sam_security: make_server_info_sam() failed with 
'NT_STATUS_UNSUCCESSFUL'



Any ideas ?

Cheers

Marco





[global]
         workgroup = PSF
         netbios name = rhea
         server string = Test

         local master = no
         domain master = no
         preferred master = no
         os level = 100

         load printers = no
         security = user
         passdb backend = ldapsam:"ldap://XXX ldap://YYY"
         guest account = Gast
         map acl inherit = yes
         ldap suffix = dc=XXX
         ldap user suffix = ou=People
         ldap group suffix = ou=Groups
         ldap idmap suffix = ou=People
         ldap admin dn = "XXX"
         ldap ssl = start tls
         ldap passwd sync = yes
         ldap delete dn = no
         socket options = TCP_NODELAY

         interfaces = br0
         bind interfaces only = Yes

         wins support = no
         wins server = 10.199.0.248
         dns proxy = yes

         keep alive = 60
         deadtime = 15
         log level = 1
         read raw = yes
         write raw = yes
         oplocks = yes
         kernel oplocks = yes
         max xmit = 65535
         getwd cache = yes

         create mode = 0666
         directory mask = 0777
         short preserve case = no
         preserve case = yes

         name resolve order = host bcast
         name cache timeout = 600
         enable privileges = yes

         Follow symlinks = yes
         write cache size = 262144
         strict allocate = yes
         use sendfile = yes
         encrypt passwords = true

         unix charset = UTF-8
         display charset = ISO8859-1
         dos charset = 850

         vfs objects = fileid
         fileid:algorithm = fsid

[MyShare]
         comment = Test
         path = /data/local/samba
         public = yes
         guest ok = yes
         writeable = yes
         create mask = 0777
         directory mask = 0777
         force group = +Mitarbeiter
         oplocks = yes
         level2 oplocks = yes
         inherit acls = yes

On 02/23/2012 11:38 AM, marco.schaerfke at proteomics.com
wrote:
> [2012/02/23 09:32:21.669389, 1] auth/server_info.c:391(samu_to_SamInfo3)
> The primary group domain
> sid(S-1-5-21-463168302-511420122-2937072671-513) does not match the
> domain sid(S-1-5-21-706331994-863180292-319919955) for
> mos(S-1-5-21-706331994-863180292-319919955-5019)
> [2012/02/23 09:32:21.669528, 0] auth/check_samsec.c:491(check_sam_security)
> check_sam_security: make_server_info_sam() failed with
> 'NT_STATUS_UNSUCCESSFUL'
The entries for the domain and the users/groups are inconsistent.
Newer Samba versions added some more consistency checks.

So the primary group has domain SID
S-1-5-21-463168302-511420122-2937072671
while user "mos" has domain SID of
S-1-5-21-706331994-863180292-319919955

The domain SIDs need to be in sync to pass the semantical checks in Samba.

Cheers,
Christian