Hi,
I'm practising to do a classicupgrade of my samba3 domain.
When I run the upgrade, I get this error :
unpack_nt_owners: owner sid mapped to uid 0
idmapping sid_to_xid failed for id[0]=S-1-5-32-544: NT_STATUS_NONE_MAPPED
unpack_nt_owners: unable to validate group sid.
set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER.
ERROR(runtime): uncaught exception - (-1073741734,
'NT_STATUS_INVALID_OWNER')
File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",
line 175, in _run
return self.run(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py",
line
1318, in run
useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 932,
in upgrade_from_samba3
result.names.domaindn, result.lp, use_ntvfs)
File
"/usr/lib/python2.7/dist-packages/samba/provision/__init__.py",
line 1562, in setsysvolacl
setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid),
use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=s4_passdb)
File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 154,
in
setntacl
smbd.set_nt_acl(file, security.SECINFO_OWNER |
security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd)
Since I already had a good practice-classicupgrade, I compared my
"logfile". The difference I see is early on, for the bad one :
Provisioning
Exporting account policy
Exporting groups
Exporting users
...
While the "good" had this :
Provisioning
Exporting account policy
Exporting groups
Ignoring group 'ace-personeel'
S-1-5-21-177555115-702490737-1861429907-1120 listed but then not found:
Unable to enumerate group members, (-1073741722,No such group)
Ignoring group 'Studenten' S-1-5-21-177555115-702490737-1861429907-1003
listed but then not found: Unable to enumerate group members,
(-1073741722,No such group)
Ignoring group 'dotsysgroep'
S-1-5-21-177555115-702490737-1861429907-1136 listed but then not found:
Unable to enumerate group members, (-1073741722,No such group)
Ignoring group 'Machines' S-1-5-21-177555115-702490737-1861429907-1059
listed but then not found: Unable to enumerate group members,
(-1073741722,No such group)
Ignoring group 'Domain Guests'
S-1-5-21-177555115-702490737-1861429907-514 listed but then not found:
Unable to enumerate group members, (-1073741722,No such group)
Ignoring group 'RDP' S-1-5-21-177555115-702490737-1861429907-3264 listed
but then not found: Unable to enumerate group members, (-1073741722,No
such group)
Ignoring group 'NDA' S-1-5-21-177555115-702490737-1861429907-3263 listed
but then not found: Unable to enumerate group members, (-1073741722,No
such group)
Ignoring group 'isoadmin' S-1-5-21-177555115-702490737-1861429907-3265
listed but then not found: Unable to enumerate group members,
(-1073741722,No such group)
Ignoring group 'testers' S-1-5-21-177555115-702490737-1861429907-3015
listed but then not found: Unable to enumerate group members,
(-1073741722,No such group)
Ignoring group 'surfers' S-1-5-21-177555115-702490737-1861429907-3017
listed but then not found: Unable to enumerate group members,
(-1073741722,No such group)
...
The good one does export my groups, the bad one skips this for some
reason. The files passwd and group are in the same directory as all tdb
files.
What am I missing ?
P.S. Is there on "official" way to have a log to see what the
classicupgrade does ? Now I ssh'd into the machine and I copied the
screen-content.
Kind regards,
Koenraad Lelong