samba - Jul 2012 - A device attached to the system is not functioning

Dear all,
I was looking a lot around of Internet, but still did not find some
solution for my problem.
I have SAMBA and domain with ldap, everything have been fine until today.

Like usually I did create new user in domain and tried to get into my
domain on Windows 7 and Windows XP machines.
Then I have got this error:

"A device attached to the system is not functioning"
I checked SAMBA logs and found this:

==> /var/log/samba/xp-8a995003b537.log <=[2012/07/02 17:38:28.626582,  1]
rpc_server/srv_pipe_hnd.c:1602(serverinfo_to_SamInfo_base)
  _netr_LogonSamLogon: user MYDOMAINE.COM\alex has user sid
S-1-5-21-2139989288-483860436-2398042574-3228
   but group sid S-1-5-21-3745118107-2241246581-749181168-513-513.
  The conflicting domain portions are not supported for NETLOGON calls

I guess it's happens because some problems with SID. I did check SID for
user alex:

# pdbedit -L -v alex
User SID:                  S-1-5-21-2139989288-483860436-2398042574-3228
Primary Group SID:    S-1-5-21-3745118107-2241246581-*749181168-513*-513
Domain:                    MYDOMAIN.COM

Also I did check SID for my domain:
# net getlocalsid  MYDOMAIN .COM
SID for domain  MYDOMAIN .COM is: S-1-5-21-3745118107-2241246581-*
749181168-513*

So could you please to help to solve this issue?
Thanks.


-- 
*?????, *
*???? ????*
*+9 72 54 285 952 3
*
*www.linuxspace.org* <http://www.linuxspace.org>
*--*
*Best regards.*
*Alex Berber*
*+9 72 54 285 952 3*
*www.linuxspace.org* <http://www.linuxspace.org/>

On Mon, Jul 2, 2012 at 10:49 AM, Alan Holt <berber.it at gmail.com>
wrote:
> Dear all,
> I was looking a lot around of Internet, but still did not find some
> solution for my problem.
> I have SAMBA and domain with ldap, everything have been fine until today.
>
> Like usually I did create new user in domain and tried to get into my
> domain on Windows 7 and Windows XP machines.
> Then I have got this error:
>
> "A device attached to the system is not functioning"
> I checked SAMBA logs and found this:
>
> ==> /var/log/samba/xp-8a995003b537.log <=> [2012/07/02
17:38:28.626582,  1]
> rpc_server/srv_pipe_hnd.c:1602(serverinfo_to_SamInfo_base)
>   _netr_LogonSamLogon: user MYDOMAINE.COM\alex has user sid
> S-1-5-21-2139989288-483860436-2398042574-3228
>    but group sid S-1-5-21-3745118107-2241246581-749181168-513-513.
>   The conflicting domain portions are not supported for NETLOGON calls
>
> I guess it's happens because some problems with SID. I did check SID
for
> user alex:
>
> # pdbedit -L -v alex
> User SID:                  S-1-5-21-2139989288-483860436-2398042574-3228
> Primary Group SID:    S-1-5-21-3745118107-2241246581-*749181168-513*-513
> Domain:                    MYDOMAIN.COM
>
> Also I did check SID for my domain:
> # net getlocalsid  MYDOMAIN .COM
> SID for domain  MYDOMAIN .COM is: S-1-5-21-3745118107-2241246581-*
> 749181168-513*
>
> So could you please to help to solve this issue?
> Thanks.
>
I do not believe windows likes samba3 / windows nt domains having a
"." in the domain name

John

I just noticed, when I am truing to connect with windows computer to
domain, I see in the log next:


[2012/07/03 14:06:26.341978,  1]
rpc_server/srv_pipe_hnd.c:1602(serverinfo_to_SamInfo_base)
  _netr_LogonSamLogon: user MYDOMAINE.COM\ronib has user sid
S-1-5-21-2139989288-483860436-2398042574-3222
   but group sid S-1-5-21-3745118107-2241246581-749181168-513-513.

But:

Domain Admins (S-1-5-21-2139989288-483860436-2398042574-512) -> Domain
Admins
Domain Users (S-1-5-21-2139989288-483860436-2398042574-513) -> Domain Users
Domain Guests (S-1-5-21-2139989288-483860436-2398042574-514) -> Domain
Guests
Domain Computers (S-1-5-21-2139989288-483860436-2398042574-515) -> Domain
Computers
Administrators (S-1-5-32-544) -> Administrators
Account Operators (S-1-5-32-548) -> Account Operators
Print Operators (S-1-5-32-550) -> Print Operators
Backup Operators (S-1-5-32-551) -> Backup Operators
Replicators (S-1-5-32-552) -> Replicators
Board Members (S-1-5-32-600) -> Board
Management Members (S-1-5-32-601) -> Management
qa (S-1-5-21-2139989288-483860436-2398042574-3001) -> qa
na (S-1-5-21-2139989288-483860436-2398042574-3007) -> na


So question is, wtf is but group sid
S-1-5-21-3745118107-2241246581-749181168-513-513 this ???

I don not see any group like this in my domain, user ronib is in group
Domain Users and this group looks like this:
Domain Users (S-1-5-21-2139989288-483860436-2398042574-513) -> Domain Users
>From where this sid S-1-5-21-3745118107-2241246581-749181168-513-513
????????



-- 
*?????, *
*???? ????*
*+9 72 54 285 952 3
*
*www.linuxspace.org* <http://www.linuxspace.org>
*--*
*Best regards.*
*Alex Berber*
*+9 72 54 285 952 3*
*www.linuxspace.org* <http://www.linuxspace.org/>