search for: 90839350

Some other observations in log.winbindd-idmap: > [2016/04/12 08:37:54.028456, 1] ../source3/winbindd/idmap_ad.c:523(idmap_ad_sids_to_unixids) > Could not get unix ID for SID S-1-5-21-90839350-987482234-868425949-133237 > [2016/04/12 08:45:57.051863, 1] ../source3/winbindd/idmap_ad.c:523(idmap_ad_sids_to_unixids) > Could not get unix ID for SID S-1-5-21-90839350-987482234-868425949-133222 This happens for 30 different SID's: some with a long last RID: > Could not get un...

Hi, I just upgraded my member (fileserver) server (wheezy) from sernet-4.1 to sernet-4.2, to be ready for tomorrow's badlock outbreak. Under 4.1 we used sssd, and now 4.2 with winbind. Everything seems to be running good: wbinfo (-p, -u, -g, -t) all give the expected results, same for getent (group, passwd, username) File serving works, life is good. :-) Last step: allowing ssh access

On 12/04/16 08:03, lists wrote: > Some other observations in log.winbindd-idmap: > >> [2016/04/12 08:37:54.028456, 1] >> ../source3/winbindd/idmap_ad.c:523(idmap_ad_sids_to_unixids) >> Could not get unix ID for SID >> S-1-5-21-90839350-987482234-868425949-133237 >> [2016/04/12 08:45:57.051863, 1] >> ../source3/winbindd/idmap_ad.c:523(idmap_ad_sids_to_unixids) >> Could not get unix ID for SID >> S-1-5-21-90839350-987482234-868425949-133222 > > This happens for 30 different SID's: some with a...

...n: samba at lists.samba.org > Onderwerp: Re: [Samba] winbind pam trouble > > Some other observations in log.winbindd-idmap: > > > [2016/04/12 08:37:54.028456, 1] > ../source3/winbindd/idmap_ad.c:523(idmap_ad_sids_to_unixids) > > Could not get unix ID for SID S-1-5-21-90839350-987482234-868425949- > 133237 > > [2016/04/12 08:45:57.051863, 1] > ../source3/winbindd/idmap_ad.c:523(idmap_ad_sids_to_unixids) > > Could not get unix ID for SID S-1-5-21-90839350-987482234-868425949- > 133222 > > This happens for 30 different SID's: some with a...

...196/196] linked_values[0/0] > Replicating DC=ForestDnsZones,DC=samba,DC=company,DC=com > Partition[DC=ForestDnsZones,DC=samba,DC=company,DC=com] objects[25/25] linked_values[0/0] > Committing SAM database > Setting isSynchronized and dsServiceName > Cloned domain SAMDOM (SID S-1-5-21-90839350-988488634-868425949) > ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A process has requested access to an object but has not been granted those access rights.') > File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 178, in _run >...

...d ldap_connect_system: succesful connection to the LDAP server ldap_connect_system: LDAP server does support paged results init_sam_from_ldap: Entry found for user: heupink Unix username: heupink NT username: heupink Account Flags: [U ] User SID: S-1-5-21-90839350-988488634-868425949-3028 Primary Group SID: S-1-5-21-90839350-988488634-868425949-513 Full Name: heupink, mourik jan c Home Directory: \\intech006\heupink HomeDir Drive: P: Logon Script: intech.bat Profile Path: Domain: INTECH Account desc:...

...> passwordAttribute: initialAuthIncoming > passwordAttribute: pekList > passwordAttribute: msDS-ExecuteScriptPassword > 88488634-868425949-572>;CN=Denied RODC Password Replication Group,CN=Users,DC > dn: <GUID=9bec2aa0-99bf-479d-81e7-7447eee4b155>;<SID=S-1-5-21-90839350-988488634-868425949-572>;CN=Denied RODC Password Replication Group,CN=Users,DC=samba,DC=company,DC=com > 88488634-868425949-572>;CN=Denied RODC Password Replication Group,CN=Users,DC > [2020/10/14 13:36:54.288696, 3, pid=32634, effective(0, 0), real(0, 0)] ../../source3/smbd/passwor...

...al trouble if you don't have the last three :-D > > They are well known SIDs > > 501 is Guest > 502 is krbtgt > 517 is Cert Publishers > > Try opening a terminal on the DC and run this: > > ldbsearch -H /usr/local/samba/private/sam.ldb > '(objectsid=S-1-5-21-90839350-987482234-868425949-501)' I searched with ldbsearch, and that confirmed that we DO have those records. So at least we don't seem to have REAL trouble. :-D Looking at ADUC, I realise that these 'problem' acounts are the (few) accounts with no UID assigned to them. So the 'err...

...t;> Replicating DC=ForestDnsZones,DC=samba,DC=company,DC=com >> Partition[DC=ForestDnsZones,DC=samba,DC=company,DC=com] >> objects[25/25] linked_values[0/0] >> Committing SAM database >> Setting isSynchronized and dsServiceName >> Cloned domain SAMDOM (SID S-1-5-21-90839350-988488634-868425949) >> ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A >> process has requested access to an object but has not been granted >> those access rights.') >> ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py&qu...

...estDnsZones,DC=samba,DC=company,DC=com > >> Partition[DC=ForestDnsZones,DC=samba,DC=company,DC=com] > >> objects[25/25] linked_values[0/0] > >> Committing SAM database > >> Setting isSynchronized and dsServiceName > >> Cloned domain SAMDOM (SID S-1-5-21-90839350-988488634-868425949) > >> ERROR(runtime): uncaught exception - (3221225506, '{Access > Denied} A > >> process has requested access to an object but has not been granted > >> those access rights.') > >> ? File > "/usr/lib/python2.7/dist-pack...

...; > Replicating DC=ForestDnsZones,DC=samba,DC=company,DC=com > > Partition[DC=ForestDnsZones,DC=samba,DC=company,DC=com] > objects[25/25] linked_values[0/0] > > Committing SAM database > > Setting isSynchronized and dsServiceName > > Cloned domain SAMDOM (SID S-1-5-21-90839350-988488634-868425949) > > ERROR(runtime): uncaught exception - (3221225506, '{Access > Denied} A process has requested access to an object but has > not been granted those access rights.') > > File > "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py&qu...

...hIncoming >> ? passwordAttribute: pekList >> ? passwordAttribute: msDS-ExecuteScriptPassword >> ?? 88488634-868425949-572>;CN=Denied RODC Password Replication >> Group,CN=Users,DC >> ? dn: >> <GUID=9bec2aa0-99bf-479d-81e7-7447eee4b155>;<SID=S-1-5-21-90839350-988488634-868425949-572>;CN=Denied >> RODC Password Replication Group,CN=Users,DC=samba,DC=company,DC=com >> ?? 88488634-868425949-572>;CN=Denied RODC Password Replication >> Group,CN=Users,DC >> [2020/10/14 13:36:54.288696,? 3, pid=32634, effective(0, 0), real(0, &...

...ing DC=ForestDnsZones,DC=samba,DC=company,DC=com >>> Partition[DC=ForestDnsZones,DC=samba,DC=company,DC=com] >> objects[25/25] linked_values[0/0] >>> Committing SAM database >>> Setting isSynchronized and dsServiceName >>> Cloned domain SAMDOM (SID S-1-5-21-90839350-988488634-868425949) >>> ERROR(runtime): uncaught exception - (3221225506, '{Access >> Denied} A process has requested access to an object but has >> not been granted those access rights.') >>> File >> "/usr/lib/python2.7/dist-packages/samba/netcm...