Displaying 20 results from an estimated 76 matches for "dom_sid".
2005 Jun 02
1
Winbindd chokes on W2K users in only one group
Hi there,
I've been trying to set up Samba 3.0.14a with Active Directory
integration on a network with an ordinary W2k Server PDC. I'm currently
having a problem which I'm convinced has nothing to do with my Windows
or Samba configuration.
The problem only occurs when trying to connect to the Samba server from
an authenticated domain account which is only a member of the default
2016 Aug 04
7
Hyper-V Virtual Machines fail to start on Samba shares
...08/04 15:52:32.050297, 3]
../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0xe2088297
[2016/08/04 15:52:32.050822, 3] ../source3/lib/access.c:338(allow_access)
Allowed connection from 192.168.160.5 (192.168.160.5)
[2016/08/04 15:52:32.050897, 3]
../libcli/security/dom_sid.c:209(dom_sid_parse_endp)
string_to_sid: SID root is not in a valid format
[2016/08/04 15:52:32.052771, 3]
../source3/smbd/service.c:614(make_connection_snum)
Connect path is '/tmp' for service [IPC$]
[2016/08/04 15:52:32.052852, 3]
../libcli/security/dom_sid.c:209(dom_sid_parse_endp)...
2016 Aug 09
0
Hyper-V Virtual Machines fail to start on Samba shares
.../source3/lib/access.c:338(allow_access)
Allowed connection from 192.168.170.43 (192.168.170.43)
[2016/08/09 10:33:43.165134, 3]
../source3/smbd/service.c:614(make_connection_snum)
Connect path is '/Pools/Pool-0/d1/s1' for service [s1]
[2016/08/09 10:33:43.165185, 3]
../libcli/security/dom_sid.c:209(dom_sid_parse_endp)
string_to_sid: SID root is not in a valid format
[2016/08/09 10:33:43.166581, 3] ../source3/smbd/vfs.c:113(vfs_init_default)
Initialising default vfs hooks
[2016/08/09 10:33:43.166638, 3] ../source3/smbd/vfs.c:139(vfs_init_custom)
Initialising custom vfs hooks from...
2014 Mar 06
0
string_to_sid: SID @groupname is not in a valid format
Hi all,
I've installed samba (Sernet 3.6.22 on CentOS 6) on a NATed system and now I'm not able to connect or write to my shares.
The message in the log says:
[2014/03/06 09:45:38.849457, 3, pid=48264, effective(0, 0), real(0, 0)] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
string_to_sid: SID @smc_cc is not in a valid format
[2014/03/06 09:45:38.850510, 3, pid=48264, effective(0, 0), real(0, 0)] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
string_to_sid: SID @osijek is not in a valid format
[2014/03/06 09:45:38.852050, 3, pid=48...
2003 Mar 06
1
ACL bug FIXes for get_nt_acl()
Two attached patches for samba 2.2.7a and 3.0-alfa22,
that I've made today, fix 3 bugs mentioned in my previous e-mail.
1) For each file in addition to ALLOW ACE
proper DENY ACE is created.
2) "Take ownership" is shown DENIED for all except root ACEs
3) Read Permissions and read attributes are always shown as allowed,
as they are actually allowed.
--
Zhitomirsky
2014 Jun 03
1
How to grant access to file shares by AD groups that have spaces in their name?
...15:02:21.810863, 3] ../source3/smbd/process.c:1398(switch_message)
switch message SMBtconX (pid 15310) conn 0x0
[2014/06/03 15:02:21.811941, 3] ../source3/lib/access.c:338(allow_access)
Allowed connection from 192.168.168.99 (192.168.168.99)
[2014/06/03 15:02:21.812679, 3] ../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
string_to_sid: SID @INFINITY+Domain Users is not in a valid format
[2014/06/03 15:02:21.823678, 3] ../source3/smbd/service.c:375(find_forced_group)
Forced group Domain Users
[2014/06/03 15:02:21.824421, 3] ../source3/smbd/service.c:612(make_connection_snum)
Connect...
2014 Mar 24
1
certain users can't map home directories
...oread)
[2014/03/24 17:20:45.564453, 3] smbd/process.c:1467(switch_message)
switch message SMBtconX (pid 18333) conn 0x0
[2014/03/24 17:20:45.564494, 3] lib/access.c:338(allow_access)
Allowed connection from 129.119.103.59 (129.119.103.59)
[2014/03/24 17:20:45.564527, 3]
../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
string_to_sid: SID root is not in a valid format
[2014/03/24 17:20:45.565103, 3] smbd/service.c:872(make_connection_snum)
Connect path is '/users5/volume1/hisusername' for service [hisusername]
[2014/03/24 17:20:45.565243, 3] smbd/vfs.c:102(vfs_init_default...
2016 May 18
1
Error with "samba-tool ntacl get --as-sddl"
> Hi, this is because when you use '--as-sddl', the python code does this:
>
> if as_sddl:
> try:
> domain_sid = security.dom_sid(samdb.domain_sid)
> except:
> raise CommandError("Unable to read domain SID from
> configuration files")
> self.outf.write(acl.as_sddl(domain_sid)+"\n")
>
> Or to put it in English, it tries to get the Domain SID from sa...
2016 May 17
3
Error with "samba-tool ntacl get --as-sddl"
On two Samba 4.4.2/4.4.3 member servers, "samba-tool ntacl get
--as-sddl" gives the following error:
ERROR: Unable to read domain SID from configuration files
Which configuration files is it referring to?
Without "--as-sddl" the command gives a correct output.
It would be nice to get the permissions in sddl format...
The same command works as expected on two AC DCs.
2002 Oct 22
4
Re: Coming round to SURS...
...esult to our cache.
>
> the idmap_central_* functions should be plugable/selectable (different
> backends should be allowed here)
>
> and the backend should decide how to handle unmapped id's.
>
> comments please
>
> /* idmap api */
> NT_STATUS idmap_sid_to_id(DOM_SID *sid, int *id, BOOL *group);
> {
> if (NT_STATUS_IS_OK(idmap_cache_sid_to_id(sid,id,group)))
> {
> return NT_STATUS_OK;
> }
>
> if (!NT_STATUS_IS_OK(idmap_central_sid_to_id(sid,id,group)))
> {
>...
2019 Apr 30
5
Group Permissions Not Working
...equest_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_NOT_FOUND] || at ../source3/smbd/smb2_ioctl.c:309
[2019/04/30 11:28:20.935817, 3] ../lib/util/access.c:365(allow_access)
Allowed connection from 172.25.190.227 (172.25.190.227)
[2019/04/30 11:28:20.935874, 3] ../libcli/security/dom_sid.c:210(dom_sid_parse_endp)
string_to_sid: SID @DOMAIN\Group1 is not in a valid format
[2019/04/30 11:28:20.937229, 3] ../source3/smbd/service.c:595(make_connection_snum)
Connect path is '/srv/SITES' for service [SITES]
[2019/04/30 11:28:20.937284, 3] ../libcli/security/dom_sid.c:210(dom_...
2018 Jan 14
2
Access to Windows 2016 server works with IP but not with netbios name
...t the entry. A
> "troubleshooting" wiki I was reading suggested adding: "winbind use
> default domain = yes" to fix that. I added that and was then able to
> lookup the user without needing the "wg\".
>
> In looking at the sources for libcli/security/dom_sid.c, which is
> where the "invalid format" messages are displayed, I'm a bit confused.
> That function seems to be assuming it's received an actual SID and not
> the group designation. Does anyone know why it would be checking the
> @WG\dl_fred1_testshare_r?
>
>...
2015 Apr 12
6
Samba as AD member can not validate domain user
...2:39.293583, 3]
../source3/smbd/msdfs.c:971(get_referred_path)
get_referred_path: |shareX| in dfs path \FS\shareX is not a dfs root.
(seems it is not making problems as access to other shares giving such
error not influences anything)
2. 2015/04/12 11:32:18.852138, 3]
../libcli/security/dom_sid.c:209(dom_sid_parse_endp) string_to_sid:
SID @INTERNAL\\group is not in a valid format
such messages I get after attempt to open a share (from smb.conf):
[shareX]
comment = What it serves
path = /home/shares/data/sharex
browseable = yes
read only = no...
2018 Jan 15
0
Access to Windows 2016 server works with IP but not with netbios name
...e time = 120
> idmap uid =
> idmap gid =
> idmap config * : range = 10000-20000
> idmap config * : backend = tdb
>
> After restarting Samba and attempting to access the share I received
> the same error, i.e.:
>
> [2018/01/15 18:24:14.986326, 3]
> ../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
> string_to_sid: SID @WG\dl_fred1_testshare_m is not in a valid format
> [2018/01/15 18:24:15.010177, 3]
> ../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
> string_to_sid: SID @WG\dl_fred1_testshare_r is not in a valid format
> [2018/01/15 18:24:15...
2001 Apr 11
6
Changing Domains from NT4 / AD 2000
Hello all.
AIX 4.3.3 / Samba 2.0.6 / Production NT4.0 domain
Security = DOMAIN
encrypt passwords = yes
update encrypted = yes
Action: Moving from NT4.0 domain called nt40 to AD 2000 Domain called ad-domain
Problem: Users that have been migrated to ad-domain cannot authenticate to AIX SAMBA shares . . . the AIX SAMBA server is still part of the nt40 domain.
Explanation: I can however, map /
2018 Feb 26
0
Fwd: Client fails to mount with Samba running as daemon. Fine in foreground.
...:
1120(close_cnum)
thinkpad-x270 (ipv4:192.168.247.72:39014) closed connection to service
IPC$
[2018/02/26 16:57:37.705095, 3, pid=2994] ../lib/util/access.c:365(
allow_access)
Allowed connection from 192.168.247.72 (192.168.247.72)
[2018/02/26 16:57:37.705117, 3, pid=2994] ../libcli/security/dom_sid.c:
210(dom_sid_parse_endp)
string_to_sid: SID @ipausers is not in a valid format
[2018/02/26 16:57:37.705526, 3, pid=2994] ../source3/smbd/service.c:595(
make_connection_snum)
Connect path is '/media/nas/test_dir' for service [test]
[2018/02/26 16:57:37.705633, 3, pid=2994] ../libcli/...
2020 Feb 04
2
Winbind problems
...ing_Windows_ACLs
But in "Setting Share Permissions and ACLs", the acces is denied, as the
log messages:
[2020/02/04 15:13:38.266457, 3] ../../lib/util/access.c:371(allow_access)
Allowed connection from 192.168.0.11 (192.168.0.11)
[2020/02/04 15:13:38.266685, 3]
../../libcli/security/dom_sid.c:215(dom_sid_parse_endp)
string_to_sid: SID +EMPRESA\Domain Users is not in a valid format
[2020/02/04 15:13:38.268610, 1]
../../source3/smbd/service.c:359(create_connection_session_info)
create_connection_session_info: user 'marcio' (from session setup) not
permitted to access this s...
2018 Jan 14
2
Access to Windows 2016 server works with IP but not with netbios name
...estuser01"" and got the entry. A
"troubleshooting" wiki I was reading suggested adding: "winbind use
default domain = yes" to fix that. I added that and was then able to
lookup the user without needing the "wg\".
In looking at the sources for libcli/security/dom_sid.c, which is
where the "invalid format" messages are displayed, I'm a bit confused.
That function seems to be assuming it's received an actual SID and not
the group designation. Does anyone know why it would be checking the
@WG\dl_fred1_testshare_r?
Also, as I mentioned earlier, I...
2008 Nov 14
2
string_to_sid: Sid MYDOMAIN\mygroup does not start with 'S-'.
...up) not permitted to access this
share (ftp_site001)
[2008/11/13 16:05:06, 3] smbd/error.c:error_packet_set(61)
error packet at smbd/reply.c(662) cmd=117 (SMBtconX)
NT_STATUS_ACCESS_DENIED
The following code snippet shows where this error is coming from:
<snip_start>
bool string_to_sid(DOM_SID *sidout, const char *sidstr)
{
const char *p;
char *q;
/* BIG NOTE: this function only does SIDS where the identauth is
not >= 2^32 */
uint32 conv;
if ((sidstr[0] != 'S' && sidstr[0] != 's') || sidstr[1] != '-')
{...
2018 Jul 05
2
NT_STATUS_NO_MEMORY accessing a DC shared resource
...smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
status[NT_STATUS_NOT_FOUND] || at ../source3/smbd/smb2_ioctl.c:309
[2018/07/05 13:48:12.489682, 3] ../lib/util/access.c:365(allow_access)
Allowed connection from 10.0.0.10 (10.0.0.10)
[2018/07/05 13:48:12.489742, 3]
../libcli/security/dom_sid.c:210(dom_sid_parse_endp)
string_to_sid: SID root is not in a valid format
[2018/07/05 13:48:12.491233, 3]
../libcli/security/dom_sid.c:210(dom_sid_parse_endp)
string_to_sid: SID SAMDOM\myuser is not in a valid format
[2018/07/05 13:48:12.558201, 1]
../source3/param/loadparm.c:2480(lp_idm...