samba - Sep 2018 - Can't access samba because "session setup failed: NT_STATUS_INVALID_SID"

Thanks Rowland,

I didn't think i was doing all of this in an outdated way (it really makes
sense, as much of the tutorials i've followed come from before 2010 and
there's barely no  recent tutorials regarding these issues).

So i'm gonna follow your suggestion. However, how can i deal with the LDAP
server? This base is big and it's a mandatory feature i need to implement
on this Samba 4, let the users log in on Samba 4 using it's credentials
from OpenLDAP server. How could i accomplish this now?

Thanks in advance again.

Em dom, 30 de set de 2018 às 17:17, Rowland Penny via samba <
samba at lists.samba.org> escreveu:
> On Sun, 30 Sep 2018 16:32:38 +0000
> Junior Oliveira via samba <samba at lists.samba.org> wrote:
>
> >  I have an instance of samba 4 where users gonna authenticate on it
> > through a OpenLDAP server. The user from LDAP are already configured
> > with samba credentials. The issue is that they are set with an SID
> > different from the one of my machine with samba 4, i guess it's
> > because there was an old samba 3 in use when these users were
> > created. When i create a new user with "smbldap-tools", it
logs in
> > the samba correctly, but the old users don't. Anyways, all the
users
> > either old or new need to use this samba 4 now. Should i change the
> > SID of my samba instance to the old set on the old users in order to
> > settle this problem? What would be the best solution for this?
> >
> > Thanks in advance.
>
> I would suggest you stop using old outdated ways of doing things ;-)
>
> As far as I can see 'smbldap-tools' is dead, there doesn't seem
to be a
> home webpage anywhere and as such it is now unmaintained. It only
> needs a perl update to break it.
>
> We now move to Windows, Microsoft seems to be trying to stop NT4-style
> domains working, this may be by accident, or on purpose, but it is
> happening.
>
> Can I suggest you upgrade to a Samba AD domain, it is easier to
> maintain and works with current (and past) versions of Windows.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Sun, 30 Sep 2018 18:28:42 +0000
Junior Oliveira <emersonjr.eng at gmail.com> wrote:
> Thanks Rowland,
> 
> I didn't think i was doing all of this in an outdated way (it really
> makes sense, as much of the tutorials i've followed come from before
> 2010 and there's barely no  recent tutorials regarding these issues).
> 
> So i'm gonna follow your suggestion. However, how can i deal with the
> LDAP server? This base is big and it's a mandatory feature i need to
> implement on this Samba 4, let the users log in on Samba 4 using it's
> credentials from OpenLDAP server. How could i accomplish this now?
> 
> Thanks in advance again.
> 
Is the ldap server used for anything else, or is it just for Samba ?
If the latter, then there is always the 'classicupgrade' script, see
here for more info:

https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_Domain_to_Samba_AD_(Classic_Upgrade)

Rowland

The ldap server is used for some other web services of the institution like
to log in GItlab, Redmine etc. Also, used to log in Linux machines of the
labs.
What would be the solution for that case?

Em dom, 30 de set de 2018 às 18:43, Rowland Penny via samba <
samba at lists.samba.org> escreveu:
> On Sun, 30 Sep 2018 18:28:42 +0000
> Junior Oliveira <emersonjr.eng at gmail.com> wrote:
>
> > Thanks Rowland,
> >
> > I didn't think i was doing all of this in an outdated way (it
really
> > makes sense, as much of the tutorials i've followed come from
before
> > 2010 and there's barely no  recent tutorials regarding these
issues).
> >
> > So i'm gonna follow your suggestion. However, how can i deal with
the
> > LDAP server? This base is big and it's a mandatory feature i need
to
> > implement on this Samba 4, let the users log in on Samba 4 using
it's
> > credentials from OpenLDAP server. How could i accomplish this now?
> >
> > Thanks in advance again.
> >
>
> Is the ldap server used for anything else, or is it just for Samba ?
> If the latter, then there is always the 'classicupgrade' script,
see
> here for more info:
>
>
>
https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_Domain_to_Samba_AD_(Classic_Upgrade)
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>