samba - Jul 2023 - Found multiple results for "tga":

I only have a tga user. But it says it has multiple entries.

( ERROR: Failed to add members ['tga'] to group "backup" -
Found
multiple results for "tga": )

root at dc0:~# samba-tool group list |grep backup
lpcfg_do_global_parameter: WARNING: The "domain logons" option is 
deprecated
ldb_wrap open of secrets.ldb
backup

root at dc0:~# samba-tool user list|grep tga
lpcfg_do_global_parameter: WARNING: The "domain logons" option is 
deprecated
ldb_wrap open of secrets.ldb
tga

root at dc0:~# samba-tool group addmembers backup tga
lpcfg_do_global_parameter: WARNING: The "domain logons" option is 
deprecated
ldb_wrap open of secrets.ldb
string_to_sid: SID tga is not in a valid format
ERROR: Failed to add members ['tga'] to group "backup" - Found
multiple
results for "tga":
CN=tga,CN=Users,DC=granmarmo,DC=intranet
CN=SERVER,CN=Computers,DC=empresa,DC=intranet

   File "/usr/lib/python3/dist-packages/samba/netcmd/group.py", line
478,
in run
     samdb.add_remove_group_members(groupname, groupmembers,
   File "/usr/lib/python3/dist-packages/samba/samdb.py", line 425, in 
add_remove_group_members
     raise Exception('Found multiple results for "%s":\n%s' %

root at dc0:~#
root at dc0:~# samba-tool group list |grep tga
lpcfg_do_global_parameter: WARNING: The "domain logons" option is 
deprecated
ldb_wrap open of secrets.ldb
root at dc0:~#

root at dc0:~# samba-tool dbcheck
lpcfg_do_global_parameter: WARNING: The "domain logons" option is 
deprecated
Checking 242 objects
Checked 242 objects (0 errors)


-- 
A persist?ncia ? o caminho do ?xito.
Charles Chaplin

On 04/07/2023 17:14, Edson Wolf via samba wrote:
> I only have a tga user. But it says it has multiple entries.
> 
> ( ERROR: Failed to add members ['tga'] to group "backup"
- Found
> multiple results for "tga": )
> 
> root at dc0:~# samba-tool group list |grep backup
> lpcfg_do_global_parameter: WARNING: The "domain logons" option is
> deprecated
The obvious first question has to be, why do you have an NT4-style 
domain parameter in a Samba AD DC smb.conf ?
> ldb_wrap open of secrets.ldb
> backup
> 
> root at dc0:~# samba-tool user list|grep tga
> lpcfg_do_global_parameter: WARNING: The "domain logons" option is
> deprecated
> ldb_wrap open of secrets.ldb
> tga
> 
> root at dc0:~# samba-tool group addmembers backup tga
> lpcfg_do_global_parameter: WARNING: The "domain logons" option is
> deprecated
> ldb_wrap open of secrets.ldb
> string_to_sid: SID tga is not in a valid format
> ERROR: Failed to add members ['tga'] to group "backup" -
Found multiple
> results for "tga":
> CN=tga,CN=Users,DC=granmarmo,DC=intranet
> CN=SERVER,CN=Computers,DC=empresa,DC=intranet
I do not know why this is happening and I also do not understand why it 
appears that your users are in one dns domain (granmarmo.intranet) and 
your computers are in another (empresa.intranet).
Do you have any explanations for this ?
I think it may be relevant.

Rowland