mallapadi niranjan
2012-Dec-04  01:06 UTC
[Samba] Changing default primary Group sid from 513 to 515
bHi all,
I have a Samba PDC with LDAP backend (using editPosix method) . Below are
my versions
RHEL6.3
samba-3.5.10-125.el6.x86_64
samba-common-3.5.10-125.el6.x86_64
samba-winbind-clients-3.5.10-125.el6.x86_64
samba-winbind-3.5.10-125.el6.x86_64
samba-client-3.5.10-125.el6.x86_64
When i Join a new Windows System to PDC, the system gets it's Primary gid
as 513 (Domain Users) instead of (Domain Computers).
When using smbldap-tools, this works fine but we would like to avoid
smbldap-tools.
Ouput of winxp system joined to Samba PDC.
---------------
Unix username:        WINXP2$
NT username:          WINXP2$
Account Flags:        [W          ]
User SID:             S-1-5-21-3867639012-1738891662-3591060562-1010
Primary Group SID:    S-1-5-21-3867639012-1738891662-3591060562-513
Full Name:            WINXP2$
Home Directory:
HomeDir Drive:        X:
Logon Script:         %u.bat
Profile Path:
Domain:              EXAMPLE.COM
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          never
Kickoff time:         never
Password last set:    Sun, 02 Dec 2012 13:03:49 IST
Returning valid cache entry: key = ACCT_POL/minimum password age, value = 0
, timeout = Tue Dec  4 01:00:45 2012
Password can change:  Sun, 02 Dec 2012 13:03:49 IST
Returning valid cache entry: key = ACCT_POL/maximum password age, value
4294967295
, timeout = Tue Dec  4 01:00:45 2012
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Entry on LDAP
# WINXP2$, Computers, example.com
dn: uid=WINXP2$,ou=Computers,dc=example,dc=com
uid: WINXP2$
sambaSID: S-1-5-21-3867639012-1738891662-3591060562-1010
sambaAcctFlags: [W          ]
objectClass: sambaSamAccount
objectClass: account
objectClass: posixAccount
cn: WINXP2$
uidNumber: 10005
gidNumber: 513
homeDirectory: /home/EXAMPLE.COM/SMB_workstations_home
loginShell: /bin/false
sambaNTPassword: CE2914F0062745681734B36B65FCC704
sambaPwdLastSet: 1354433629
My smb.conf
[global]
    workgroup = EXAMPLE.COM
    netbios name = EXAMPLEPDC
    server string = Samba Server Version %v
    interfaces = eth1, lo
    bind interfaces only = Yes
    passdb backend = ldapsam:ldap://localhost
    password level = 8
    username level = 8
    log level = 10
    syslog = 0
    log file = /var/log/samba/log.%m
    max log size = 0
    name resolve order = wins lmhosts host bcast
    time server = Yes
    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
    printcap name = cups
    disable spoolss = Yes
    logon script = %u.bat
    logon path     logon drive = X:
    logon home     domain logons = Yes
    os level = 65
    preferred master = Yes
    domain master = Yes
    dns proxy = No
    wins support = Yes
    ldap admin dn = cn=Manager,dc=example,dc=com
    ldap delete dn = Yes
    ldap group suffix = ou=Groups
    ldap idmap suffix = ou=Idmap
    ldap machine suffix = ou=Computers
    ldap passwd sync = yes
    ldap suffix = dc=msdpl,dc=com
    ldap ssl = no
    ldap user suffix = ou=People
    idmap backend = ldap
    idmap alloc backend = ldap
    idmap uid = 10000-20000
    idmap gid = 10000-20000
    ldapsam:trusted = yes
    ldapsam:editposix = yes
    idmap alloc config:ldap_base_dn = ou=Idmap,dc=example,dc=com
    idmap alloc config:ldap_user_dn = cn=Manager,dc=example,dc=com
    idmap alloc config:ldap_url = ldap://localhost
    idmap alloc config:range = 10000-20000
    max print jobs = 100
    cups options = raw
    hide unreadable = Yes
[homes]
    comment = Home Directories
    read only = No
    browseable = No
[printers]
    comment = All Printers
    path = /var/spool/samba
    printable = Yes
    browseable = No
[netlogon]
    comment = Network Logon Service
    path = /var/lib/samba/netlogon
    guest ok = Yes
    share modes = No
[Profiles]
    path = /var/lib/samba/profiles
    guest ok = Yes
    browseable = No
Possibly Parallel Threads
- Ubuntu server 14.04 classic upgrade segmentation fault
- BDC constantly rebinds to master ldap server causing browsing delay
- Samba closing printer prematurely?
- RHEL 5.4 errors in log file...
- Can't get ldap passwd sync = only to send password request to ldap server
