search for: 2001107

Hi, When using AD authentication from a rhel8.1 environment with samba-4.10.4 installed, information on the primary group group01 set on the AD side for any user user01 cannot be obtained. [root @ rhel8_1 ~] # id user01 uid=2001107(user01) gid=2000513(domain users) groups=2000513(domain users),2001107(oec0814e),2001103(group01) If you perform the same operation on the same AD from the samba-3.6.23 rhel6.6 environment, you will get the correct information as follows: [root @ rhel6_6 ~] # id user01 uid=2001107(user01) gid=20011...

...te: > Thank you for very easy-to-understand and courteous advice. I reread your initial post and noticed something that I missed earlier, you had in smb.conf: ??????? idmap uid = 16777216-33554431 ??????? idmap gid = 16777216-33554431 Yet, you were getting results like this: id user01 uid=2001107(user01) gid=2000513(domain users) groups=2000513(domain users),2001107(oec0814e),2001103(group01) '2000513' is less than '16777216' Are you sure that you do not have sssd installed ? On top of the Samba packages you have installed, I would also expect: samba.x86_64 samba-client...

...k down the issue. > source3/auth/token_util.c:562 > > ??????????????? pass = getpwuid_alloc(tmp_ctx, uid); > and pass is null > > This is the error in the log: > ? /usr/sbin/samba-gpupdate: add_local_groups: SID > S-1-5-21-33300784-995546578-3414580312-1107 -> getpwuid(2001107) > failed, is nsswitch configured? > > root at fs1:~/samba.git# wbinfo -s > S-1-5-21-33300784-995546578-3414580312-1107 > CARLSON\peter 1

...=3.1.1,sec=ntlmssp,cache=strict,multiuser,domain=CARLSON.LAB,uid=0,noforceuid,gid=0,noforcegid,addr=192.168.1.52,file_mode=0755,dir_mode=0755,soft,nounix,serverino,mapposix,noperm,rsize=4194304,wsize=4194304,bsize=1048576,echo_interval=60,actimeo=1,_netdev) CARLSON\peter at u2gui:~$ id uid=2001107(CARLSON\peter) gid=2000513(CARLSON\domain users) groups=2000513(CARLSON\domain users),10000(BUILTIN\administrators),10001(BUILTIN\users),2000512(CARLSON\domain admins),2000572(CARLSON\denied rodc password replication group),2001107(CARLSON\peter),2001108(CARLSON\linux admins),20...

On Thu, 25 Jan 2024 18:45:52 -0800 Peter Carlson via samba <samba at lists.samba.org> wrote: > I am getting a permission denied when trying to ls as a domain user a > samba mount with windows ACLs (sigh I thought I had this figured > out). I tried to include self descriptive server names and include > them in the info below (fs1: file server, nc: addc, u2gui: ubuntu >

...e88d3;user=root;pid=0x24e63 Jan 26 09:24:56 u2gui cifs.upcall: ver=2 Jan 26 09:24:56 u2gui cifs.upcall: host=fs.carlson.lab Jan 26 09:24:56 u2gui cifs.upcall: ip=192.168.1.52 Jan 26 09:24:56 u2gui cifs.upcall: sec=1 Jan 26 09:24:56 u2gui cifs.upcall: uid=0 Jan 26 09:24:56 u2gui cifs.upcall: creduid=2001107 Jan 26 09:24:56 u2gui cifs.upcall: user=root Jan 26 09:24:56 u2gui cifs.upcall: pid=151139 Jan 26 09:24:56 u2gui cifs.upcall: get_cachename_from_process_env: pathname=/proc/151139/environ Jan 26 09:24:56 u2gui cifs.upcall: get_existing_cc: default ccache is FILE:/tmp/krb5cc_2001107 Jan 26 09:24:5...