samba - Dec 2015 - Unable to convert SID at index 3 in user token to a GID.

Hello,

Since today no users except Administrator can access any shares or log into a
RDS-host. Trying to access a share returns "The security ID structure is
invalid".

Logging into WIndows and authenticating to other services with the domain
credentials works.

I have lots of these messages in the log:

[2015/12/10 14:11:44.400918,  0]
../source4/auth/unix_token.c:107(security_token_to_unix_token)
  Unable to convert SID (S-1-5-21-2973170849-3284262837-3971445600-1120) at
index 3 in user token to a GID.  Conversion was returned as type 1, full token:
[2015/12/10 14:11:44.491517,  0]
../libcli/security/security_token.c:63(security_token_debug)
  Security token SIDs (10):
    SID[  0]: S-1-5-21-2973170849-3284262837-3971445600-1106
    SID[  1]: S-1-5-21-2973170849-3284262837-3971445600-513
    SID[  2]: S-1-5-21-2973170849-3284262837-3971445600-1121
    SID[  3]: S-1-5-21-2973170849-3284262837-3971445600-1120
    SID[  4]: S-1-1-0
    SID[  5]: S-1-5-2
    SID[  6]: S-1-5-11
    SID[  7]: S-1-5-32-555
    SID[  8]: S-1-5-32-545
    SID[  9]: S-1-5-32-554
   Privileges (0x          800000):
    Privilege[  0]: SeChangeNotifyPrivilege
   Rights (0x             400):
    Right[  0]: SeRemoteInteractiveLogonRight
[2015/12/10 14:11:44.530004,  0]
../source4/auth/unix_token.c:107(security_token_to_unix_token)
  Unable to convert SID (S-1-5-21-2973170849-3284262837-3971445600-1120) at
index 3 in user token to a GID.  Conversion was returned as type 1, full token:
[2015/12/10 14:11:44.530230,  0]
../libcli/security/security_token.c:63(security_token_debug)
  Security token SIDs (10):
    SID[  0]: S-1-5-21-2973170849-3284262837-3971445600-1106
    SID[  1]: S-1-5-21-2973170849-3284262837-3971445600-513
    SID[  2]: S-1-5-21-2973170849-3284262837-3971445600-1121
    SID[  3]: S-1-5-21-2973170849-3284262837-3971445600-1120
    SID[  4]: S-1-1-0
    SID[  5]: S-1-5-2
    SID[  6]: S-1-5-11
    SID[  7]: S-1-5-32-555
    SID[  8]: S-1-5-32-545
    SID[  9]: S-1-5-32-554
   Privileges (0x          800000):
    Privilege[  0]: SeChangeNotifyPrivilege
   Rights (0x             400):
    Right[  0]: SeRemoteInteractiveLogonRight


How can I fix this?

Best regards,

mots
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 831 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20151210/b7261576/signature.sig>