search for: getusersid

...s the trusted domain, B is the trusting domain. We have a 3.6.9 samba server joined to B's Active Directory. If we try authenticating from our machine in B's domain as a user from A given A's domain name, it works. The command used is ntlm_auth. If we try getting its groups, by calling getusersids in our own patched version of ntlm_auth, it fails with this message: >From /var/log/samba/log.winbindd: [2014/03/19 15:54:13.951576, 3] winbindd/winbindd_getusersids.c:49(winbindd_getusersids_send) getusersids S-1-5-21-3126979147-1297554514-4166189043-1113 [2014/03/19 15:54:13.951645, 1] ....

...lation which causes all following winbindd requests to fail until winbindd is restarted. We use a slightly patched version of winbindd based on Samba 3.5.8. In the used setup the winbindd is joined to an AD domain and is quite busy with answering winbindd requests of type PAM_AUTH_CRAP, LOOKUPNAME, GETUSERSIDS, and LOOKUPSID. Several AD users are member of more than 128 groups. In this production environment the issue happens a few times a day, however in our development environment the issue is unreproducible. All observed occurrences have in common that we see following messages in debug output: win...

Hi, i never post in this list before becouse all the developers did a great job before, but now i have a problem. I used samba 3.0.x for a long time without any problem with openldap as passwd backend, now with samba 3.0.12 there are stange message when i try to change account's passwd: # smbpasswd Administrator New SMB password: Retype new SMB password: account_policy_get: tdb_fetch_uint32

...ba] Samba with AD : SID rejected > > Thanks for your time. > > Now,  wbinfo -G 13010 and wbinfo -Y work. > > But I still don't see any domain users in getent passwd, and wbinfo > --user-sids=S-1-5-21-2816186202-4468957523-2022743653-4403 > still fails with > > getusersids S-1-5-21-2816186202-4468957523-2022743653-4403 > [2019/05/03 15:50:51.978858,  3, pid=910, effective(0, 0), real(0, 0), > class=winbind] > ../source3/winbindd/wb_queryuser.c:59(wb_queryuser_send) >   wb_queryuser_send: My domain -- rejecting > S-1-5-21-2816186202-4468957523-2022743...

Thanks for your time. Now,  wbinfo -G 13010 and wbinfo -Y work. But I still don't see any domain users in getent passwd, and wbinfo --user-sids=S-1-5-21-2816186202-4468957523-2022743653-4403 still fails with getusersids S-1-5-21-2816186202-4468957523-2022743653-4403 [2019/05/03 15:50:51.978858,  3, pid=910, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/wb_queryuser.c:59(wb_queryuser_send)   wb_queryuser_send: My domain -- rejecting S-1-5-21-2816186202-4468957523-2022743653-4403 [2019/05/03 15:50...

...;> >> Thanks for your time. >> >> Now,  wbinfo -G 13010 and wbinfo -Y work. >> >> But I still don't see any domain users in getent passwd, and wbinfo >> --user-sids=S-1-5-21-2816186202-4468957523-2022743653-4403 >> still fails with >> >> getusersids S-1-5-21-2816186202-4468957523-2022743653-4403 >> [2019/05/03 15:50:51.978858,  3, pid=910, effective(0, 0), real(0, 0), >> class=winbind] >> ../source3/winbindd/wb_queryuser.c:59(wb_queryuser_send) >>   wb_queryuser_send: My domain -- rejecting >> S-1-5-21-281618620...

Hi, Louis, Rowland, thanks for you answer. @Louis All packages were installed. I change my config file following your advices, the problem is still here. I already followed guides from thctlo's github. @Rowland Yes, my dns domain was different, but answered also to test.lan. It's now set to 'kdc=dc.foo.lab' I have my user vincent with uidNumber 10010 and gidNumber 13010