samba - Dec 2016 - Samba on Debian 8; NT4 domain, win10

Am 2016-12-01 um 15:41 schrieb Rowland Penny via samba:
> Have you altered /etc/resolv.conf, on the DC, to use its own ip as the
> first nameserver ?
That change seems to have fixed it!
I added that now to network config for the VM.

klist ok now

step by step ;-)

thanks

I am doing another classic-upgrade for another customer.

I get:

Importing groups
Could not add group name=Domain Admins ((68, "samldb: Account name
(sAMAccountName) 'Domain Admins' already in use!"))
Could not modify AD idmap entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1006, id=0,
type=ID_TYPE_GID ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not
found"))
Could not add posix attrs for AD entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1006, ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not
found"))
Could not add group name=Domain Guests ((68, "samldb: Account name
(sAMAccountName) 'Domain Guests' already in use!"))
Could not modify AD idmap entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1008, id=65534,
type=ID_TYPE_GID ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not
found"))
Could not add posix attrs for AD entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1008, ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not
found"))
Could not add group name=Domain Users ((68, "samldb: Account name
(sAMAccountName) 'Domain Users' already in use!"))
Could not modify AD idmap entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1007, id=100,
type=ID_TYPE_GID ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not
found"))
Could not add posix attrs for AD entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1007, ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not
found"))
Committing 'add groups' transaction to disk


-- why "already in use" ?

Am 2016-12-09 um 11:11 schrieb Stefan G. Weichinger via
samba:
> Could not add group name=Domain Admins ((68, "samldb: Account name
> (sAMAccountName) 'Domain Admins' already in use!"))
I think this is my problem (on the old host/pdc):

# net groupmap list
Domain Admins (S-1-5-21-2777655458-4002997014-749295002-1006) -> root
Domain Guests (S-1-5-21-2777655458-4002997014-749295002-1008) -> nobody
Domain Users (S-1-5-21-2777655458-4002997014-749295002-1007) -> users

?

On Fri, 9 Dec 2016 11:11:56 +0100
"Stefan G. Weichinger via samba" <samba at lists.samba.org>
wrote:
> From: "Stefan G. Weichinger via samba" <samba at
lists.samba.org>
> To: samba at lists.samba.org
> Subject: Re: [Samba] Samba on Debian 8; NT4 domain, win10
> Date: Fri, 9 Dec 2016 11:11:56 +0100
> Reply-To: "Stefan G. Weichinger" <lists at xunil.at>
> Sender: "samba" <samba-bounces at lists.samba.org>
> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
>  Thunderbird/45.5.1
> 
> 
> I am doing another classic-upgrade for another customer.
> 
> I get:
> 
> Importing groups
> Could not add group name=Domain Admins ((68, "samldb: Account name
> (sAMAccountName) 'Domain Admins' already in use!"))
> Could not modify AD idmap entry for
> sid=S-1-5-21-2777655458-4002997014-749295002-1006, id=0,
> type=ID_TYPE_GID ((32, "Base-DN
> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not
found"))
> Could not add posix attrs for AD entry for
> sid=S-1-5-21-2777655458-4002997014-749295002-1006, ((32, "Base-DN
> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not
found"))
> Could not add group name=Domain Guests ((68, "samldb: Account name
> (sAMAccountName) 'Domain Guests' already in use!"))
> Could not modify AD idmap entry for
> sid=S-1-5-21-2777655458-4002997014-749295002-1008, id=65534,
> type=ID_TYPE_GID ((32, "Base-DN
> '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not
found"))
> Could not add posix attrs for AD entry for
> sid=S-1-5-21-2777655458-4002997014-749295002-1008, ((32, "Base-DN
> '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not
found"))
> Could not add group name=Domain Users ((68, "samldb: Account name
> (sAMAccountName) 'Domain Users' already in use!"))
> Could not modify AD idmap entry for
> sid=S-1-5-21-2777655458-4002997014-749295002-1007, id=100,
> type=ID_TYPE_GID ((32, "Base-DN
> '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not
found"))
> Could not add posix attrs for AD entry for
> sid=S-1-5-21-2777655458-4002997014-749295002-1007, ((32, "Base-DN
> '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not
found"))
> Committing 'add groups' transaction to disk
> 
> 
> -- why "already in use" ?
> 
> 
> 
It looks like you have the three groups in your old system, but the
upgrade will create the well known groups automatically, so your old
ones are being ignored because they are 'already in use'

Rowland