Rowland Penny
2025-Nov-18 12:13 UTC
[Samba] samba ad integrated file server Permission denied
On Tue, 18 Nov 2025 13:03:38 +0100 Markus Huether via samba <samba at lists.samba.org> wrote:> > > but still have the log entries at 5:15 a.m. > But the question remains: who triggers these entries at 5:15 a.m.? > I've looked through all the cron jobs. There is definitely none > entered for that time. > The strange thing is that the file server works without any problems. > I then checked who has the uid 2001103 but couldn't find anything. It > must be an AD user, but I couldn't find the ID in the AD or on the > server. How can I resolve the ID to a user? > fs1$ is the server name. There is no user with fs1 on the server or > in the domain. However, I can't find anything about the uid or gid in > the domain or on the server. Is there any way I can query the uid/gid? >You are missing the point, an AD computer is a user with an extra objectclass, the 'computer' objectclass rowland at devstation:~$ getent passwd devstation$ devstation$:*:12657:10515::/home/devstation_:/bin/bash If I run 'cat /etc/cron.d/sysstat', I get this: # The first element of the path is a directory where the debian-sa1 # script is located PATH=/usr/lib/sysstat:/usr/sbin:/usr/sbin:/usr/bin:/sbin:/bin # Activity reports every 10 minutes everyday 5-55/10 * * * * root command -v debian-sa1 > /dev/null && debian-sa1 1 1 # Additional run at 23:59 to rotate the statistics file 59 23 * * * root command -v debian-sa1 > /dev/null && debian-sa1 60 2 Rowland
Markus Huether
2025-Nov-18 13:45 UTC
[Samba] samba ad integrated file server Permission denied
rowland at devstation:~$ getent passwd devstation$ devstation$:*:12657:10515::/home/devstation_:/bin/bash But if I only have one uid, getent doesn't help me. I have already checked all users and computers stored in AD with getent. If I run 'cat /etc/cron.d/sysstat', I get this: # The first element of the path is a directory where the debian-sa1 # script is located PATH=/usr/lib/sysstat:/usr/sbin:/usr/sbin:/usr/bin:/sbin:/bin # Activity reports every 10 minutes everyday 5-55/10 * * * * root command -v debian-sa1 > /dev/null && debian-sa1 1 1 # Additional run at 23:59 to rotate the statistics file 59 23 * * * root command -v debian-sa1 > /dev/null && debian-sa1 60 2 I get the same result here. The cron runs every 10 minutes and additionally at 11:59 p.m. However, I always receive the syslog entries at 5:15 a.m. and only then. So this has nothing to do with these cron entries. Markus Am 18.11.25 um 13:13 schrieb Rowland Penny via samba:> On Tue, 18 Nov 2025 13:03:38 +0100 > Markus Huether via samba <samba at lists.samba.org> wrote: > >> >> but still have the log entries at 5:15 a.m. >> But the question remains: who triggers these entries at 5:15 a.m.? >> I've looked through all the cron jobs. There is definitely none >> entered for that time. >> The strange thing is that the file server works without any problems. >> I then checked who has the uid 2001103 but couldn't find anything. It >> must be an AD user, but I couldn't find the ID in the AD or on the >> server. How can I resolve the ID to a user? >> fs1$ is the server name. There is no user with fs1 on the server or >> in the domain. However, I can't find anything about the uid or gid in >> the domain or on the server. Is there any way I can query the uid/gid? >> > You are missing the point, an AD computer is a user with an extra > objectclass, the 'computer' objectclass > > rowland at devstation:~$ getent passwd devstation$ > devstation$:*:12657:10515::/home/devstation_:/bin/bash > > If I run 'cat /etc/cron.d/sysstat', I get this: > > # The first element of the path is a directory where the debian-sa1 > # script is located > PATH=/usr/lib/sysstat:/usr/sbin:/usr/sbin:/usr/bin:/sbin:/bin > > # Activity reports every 10 minutes everyday > 5-55/10 * * * * root command -v debian-sa1 > /dev/null && debian-sa1 1 1 > > # Additional run at 23:59 to rotate the statistics file > 59 23 * * * root command -v debian-sa1 > /dev/null && debian-sa1 60 2 > > Rowland >