Am 2016-12-09 um 12:22 schrieb Rowland Penny via samba:> On Fri, 9 Dec 2016 11:37:44 +0100
> "Stefan G. Weichinger via samba" <samba at lists.samba.org>
wrote:
>> I think this is my problem (on the old host/pdc):
>>
>> # net groupmap list
>> Domain Admins (S-1-5-21-2777655458-4002997014-749295002-1006) ->
root
>> Domain Guests (S-1-5-21-2777655458-4002997014-749295002-1008) ->
>> nobody Domain Users (S-1-5-21-2777655458-4002997014-749295002-1007)
>> -> users
>
> Looks like it, try removing the mappings
removing the mappings did not change much
at first it can't add the groups as they are "already in use"
then it can't add the users to groups as the target groups don't exist
*scratches head*
-->
Importing idmap database
Cannot open idmap database, Ignoring: [Errno 2] No such file or directory
Adding groups
Importing groups
Could not add group name=Domain Admins ((68, "samldb: Account name
(sAMAccountName) 'Domain Admins' already in use!"))
Could not modify AD idmap entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1006, id=0,
type=ID_TYPE_GID ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not
found"))
Could not add posix attrs for AD entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1006, ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not
found"))
Could not add group name=Domain Guests ((68, "samldb: Account name
(sAMAccountName) 'Domain Guests' already in use!"))
Could not modify AD idmap entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1008, id=65534,
type=ID_TYPE_GID ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not
found"))
Could not add posix attrs for AD entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1008, ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not
found"))
Could not add group name=Domain Users ((68, "samldb: Account name
(sAMAccountName) 'Domain Users' already in use!"))
Could not modify AD idmap entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1007, id=100,
type=ID_TYPE_GID ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not
found"))
Could not add posix attrs for AD entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1007, ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not
found"))
Committing 'add groups' transaction to disk
Adding users
Importing users
User root has been kept in the directory, it should be removed in favour
of the Administrator user
Committing 'add users' transaction to disk
Adding users to groups
ERROR(<class 'samba.provision.ProvisioningError'>): uncaught
exception -
ProvisioningError: Could not add member
'S-1-5-21-2777655458-4002997014-749295002-1000' to group
'S-1-5-21-2777655458-4002997014-749295002-1006' as either group or user
record doesn't exist: Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found
File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",
line
175, in _run
return self.run(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line
1452, in run
useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 824,
in
upgrade_from_samba3
add_users_to_group(result.samdb, g, groupmembers[str(g.sid)], logger)
File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 317,
in
add_users_to_group
raise ProvisioningError("Could not add member '%s' to group
'%s' as
either group or user record doesn't exist: %s" % (member_sid,
group.sid,
emsg))
root at dc01:~# net groupmap list
root at dc01:~#