search for: lookupname

...ot@wolf # sh /rbin/test --- w2kdomain == dom w2kpdc == e231pdc sambahost == wolf winbind separator == + winbind use default domain == no --- => getent group dom+e231 DOM+e231:x:24006:DOM+pichwo,DOM+atest -> rpcclient e231pdc cmd = lookupnames e231 e231 S-1-5-21-507921405-1957994488-839522115-1109 (2) --> rpcclient wolf cmd = lookupnames e231 result was NT_STATUS_NONE_MAPPED -> rpcclient e231pdc cmd = lookupnames dom\e231 dom\e231 S-1-5-21-507921405-1957994488-839522115-1109 (2) --> rpcclient wolf cmd = lookupnames dom\e231 res...

...but doesn't: # pw usershow PaulBarrett pw: no such user `PaulBarrett' The output in log.wb-JIGSAWHQ (winbindd -d4) is this: [2006/10/23 12:35:44, 4] nsswitch/winbindd_dual.c:fork_domain_child(806) child daemon request 20 [2006/10/23 12:35:44, 3] nsswitch/ winbindd_async.c:winbindd_dual_lookupname(709) [ 6457]: lookupname JIGSAWHQ\PaulBarrett [2006/10/23 12:35:44, 3] nsswitch/winbindd_rpc.c:msrpc_name_to_sid(257) rpc: name_to_sid name=JIGSAWHQ\PaulBarrett [2006/10/23 12:35:44, 3] nsswitch/winbindd_rpc.c:msrpc_name_to_sid(265) name_to_sid [rpc] JIGSAWHQ\PaulBarrett for domain JIGSAWH...

...squid or a samba/ntlm_auth trouble... indeed... In Squid i've added: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --domain=LNFFVG --require-membership-of='LNFFVG\Domain Users' auth_param ntlm children 5 but in 'cache.log' i got: Winbindd lookupname failed to resolve 'LNFFVG\Domain into a SID! Winbindd lookupname failed to resolve 'LNFFVG\Domain into a SID! I've tried some escape tecniques for the space character, but with no luck. Leaving simply: auth_param ntlm program /usr/bin/ntlm_auth --helper-protocol=squid-2.5-ntlmssp --...

Hi i see on my log, two informations : 1- Into my log, i see a very big quantity of : [19391]: lookupname ECTPP/root [2005/12/09 14:28:46, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupname(695) [19391]: lookupname ECTPP/root [2005/12/09 14:28:46, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupname(695) 10x per s .... 600x/minutes .. it's very very big no ? It's possible that is Spama...

...rectory gets created in "/homedir/domain/userfirst userlast" with the space. When connecting, they are always prompted for a password and cannot connect, no matter what they type. I ran ' winbindd -d3 -i' and the output is similar to: getpwnam domain+userfirst userlast .. .. .. lookupname domain+userfirst Notice the lookupname does not include the last name. Is this possibly the problem? Does anyone have any workaround, other that recreating all the problem usernames without any spaces? By the way, users without spaces in their username work exactly as they are supposed to. One...

...8:33:19, 10] nsswitch/winbindd.c:process_request(332) process_request: request fn DOMAIN_NAME [2005/07/22 08:33:19, 3] nsswitch/winbindd_misc.c:winbindd_domain_name(470) [ 0]: request domain name [2005/07/22 08:33:19, 10] nsswitch/winbindd.c:process_request(332) process_request: request fn LOOKUPNAME [2005/07/22 08:33:19, 3] nsswitch/winbindd_sid.c:winbindd_lookupname(103) [ 0]: lookupname ENGR\benvon [2005/07/22 08:33:19, 5] nsswitch/winbindd_async.c:lookupname_recv(627) lookup_name returned an error [2005/07/22 08:33:19, 5] nsswitch/winbindd_sid.c:lookupname_recv(116) lookupname retu...

. DOMAIN_ADMIN_PASSWD.sh echo ${PASSWD} | kinit ${ADMIN}@${DOMAIN} echo -n > /etc/ntfs-3g.usermap for DOMAIN_USER in $(wbinfo -u);do RPCLOOKUPID=$(rpcclient -P -c "lookupnames ${DOMAIN_USER}" ${DOMAIN}) if [ "${RPCLOOKUPID:0:7}" != "ERROR: " ] && [ "${RPCLOOKUPID:0:7}" != "Failed " ];then SID=$(echo ${RPCLOOKUPID}|awk '{print $2}') echo ${DOMAIN_USER}::${SID} >> /etc/ntfs-3g.usermap fi done for DOM...

...ith user auth with an AD Its working for a long time, but suddenly this weekend the users cant authenticate anymore looking on logs i obtain this Oct 10 08:29:59 sol (ntlm_auth): [2005/10/10 08:29:59, 0] utils/ntlm_auth.c:get_require_membership_sid(237) Oct 10 08:29:59 sol (ntlm_auth): Winbindd lookupname failed to resolve VILLAS+SQUID into a SID! searching for this error on google i tried on ntlm_auth command to change the DOMAIN+GROUP to SID and with SID works fine /usr/bin/ntlm_auth --helper-protocol=squid-2.5-basic --require-membership-of=VILLAS+SQUID USER PASSWORD [2005/10/10 12:18:53, 0] ut...

...8/22 23:20:04, 3] winbindd/winbindd_sid.c:winbindd_sid_to_gid(296) [ 2187]: sid to gid S-1-5-32-545 [2009/08/22 23:20:04, 7] winbindd/winbindd_idmap.c:winbindd_sid2gid_async(363) winbindd_sid2gid_async: Resolving S-1-5-32-545 to a gid [2009/08/22 23:20:04, 3] winbindd/winbindd_sid.c:winbindd_lookupname(102) [ 2187]: lookupname Unix User\root [2009/08/22 23:20:04, 3] winbindd/winbindd_sid.c:winbindd_lookupname(102) [ 2187]: lookupname URBAN\allstaff [2009/08/22 23:20:04, 3] winbindd/winbindd_sid.c:winbindd_lookupname(102) [ 2187]: lookupname URBAN\allstaff I've tried using a different...

....eb string_to_sid: SID admin.eb is not in a valid format user 'PSI+admin.eb' (from session setup) not permitted to access this share (admin.eb) looking in log.winbindd, winbindd try several names search: getpwnam psi+admin.eb getpwnam PSI+admin.eb getpwnam PSI+admin.eb lookupname AD+admin.eb Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED lookupname Unix User+admin.eb Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED getpwnam admin.eb Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED getpwnam ADMIN.EB Could not convert sid S-0-0: NT_STATUS_NONE_MAP...

...rogram: /usr/bin/ntlm_auth --request-nt-key --username=javi2 --require-membership-of='AAMM\MyGroup' --domain=AAMM --challenge=6b480cf181ded625 --nt-response=bce392db1fcd91380690317e7cd1228e78940576d78fde21 [2005/05/16 09:05:57, 0] utils/ntlm_auth.c:get_require_membership_sid(237) Winbindd lookupname failed to resolve 'AAMM\MyGroup' into a SID! Does anybody know why could it be happening? Thanks in advance for any help!!

...ust a single user: valid users = INS+DavidSha, it fails to give me access. I see the following in log.winbindd. It looks like it is looking for a domain called DavidSha?!? My winbindd separator is +. Can somebody please respond to this. 2002/02/20 11:37:21, 3] nsswitch/winbindd_sid.c:winbindd_lookupname(76) [27055]: lookupname [DavidSha]\[INS] [2002/02/20 11:37:21, 0] nsswitch/winbindd_sid.c:winbindd_lookupname(83) could not find domain entry for domain DavidSha wbinfo -t secret is good wbinfo -u/-g returns all groups/users getent passwd INS+DavidSha returns a user line getent group "INS...

...n't you get my offlist message ? Yes, I did get it, but due to labyrinthine .procmailrc settings, it did not go to the mailbox in which I normally read the sambalist messages! Checking my offline mailbox ... in that email, you suggest (expanded): $ /usr/bin/rpcclient -U "" -c "lookupnames $USER" mail Enter 's password: So, it *still* asks for a password, and the user's ID in the prompt is empty (from the empty -U?). If I leave off the -U it asks for mark's password. Am I doing something wrong? Once I enter the password, the rest of your script ultimately does ge...

...e [ 0]: getgrgid 6000 Doing a "chown administrator.dmg test/" gives: [ 0]: request interface version [ 0]: request location of privileged pipe [ 0]: getgrgid 6000 [ 0]: request interface version [ 0]: request location of privileged pipe [ 0]: getgroups root [ 2113]: lookupname METADS\root string_to_sid: Sid S-0-0 is not in a valid format. [ 0]: request interface version [ 0]: request location of privileged pipe [ 0]: getpwnam administrator.dmg [ 2113]: lookupname METADS\administrator.dmg rpc: name_to_sid name=METADS\administrator.dmg name_to_sid [rpc] administra...

...t; In Squid i've added: > > auth_param ntlm program /usr/bin/ntlm_auth > --helper-protocol=squid-2.5-ntlmssp --domain=LNFFVG > --require-membership-of='LNFFVG\Domain Users' > auth_param ntlm children 5 > > but in 'cache.log' i got: > > Winbindd lookupname failed to resolve 'LNFFVG\Domain into a SID! > Winbindd lookupname failed to resolve 'LNFFVG\Domain into a SID! > > I've tried some escape tecniques for the space character, but > with no luck. Leaving simply: > > auth_param ntlm program /usr/bin/ntlm_auth > -...

...s an unmapped group, so where has the correct SID gone ? > Is 10513 the uidNumber for Domain Users ? > > I suggest you check the AD database, if only to rule it out. > > Try running this: > > rpcclient localhost -U'arbeitsgruppe\administrator%xxxxxxxxxx' > -c 'lookupnames "ARBEITSGRUPPE\Domain Users"' gives me: ARBEITSGRUPPE\Domain Users S-1-5-21-2777655458-4002997014-749295002-513 (Domain Group: 2) in the meantime I reset iptables with (from ubuntu wiki ...): iptables -F iptables -X iptables -t nat -F iptables -t nat -X iptables -t mangle -F ipta...

...017 at 4:42 PM, Jeff Sadowski > <jeff.sadowski at gmail.com> wrote: > > . DOMAIN_ADMIN_PASSWD.sh > > echo ${PASSWD} | kinit ${ADMIN}@${DOMAIN} > > echo -n > /etc/ntfs-3g.usermap > > for DOMAIN_USER in $(wbinfo -u);do > > RPCLOOKUPID=$(rpcclient -P -c "lookupnames ${DOMAIN_USER}" > > ${DOMAIN}) if [ "${RPCLOOKUPID:0:7}" != "ERROR: " ] && > > [ "${RPCLOOKUPID:0:7}" != "Failed " ];then > > SID=$(echo ${RPCLOOKUPID}|awk '{print $2}') > > echo ${DOMAIN_USER}::${SID} >&gt...

...atabase on the new server with the exact same usernames and SIDs and hashes that are in use on the old server. (I may clean up the UIDs, though.) However, I've noticed something odd: /etc/samba/smbpasswd on 2.2.7 doesn't contain any RIDs or SIDs. And yet, if I run rpcclient and do "lookupnames lshaw" against the 2.x server, I can see that my (lshaw's) SID is formed of the domain SID plus some RID that comes from somewhere. But, *where* is that RID coming from? I presume it is some sort of persistent mapping, but what stores it? It's not in smbpasswd, because it doesn'...

...my Domain from NT4 to AD. Domain SID is a different one. I try to set this to the new one. old pdc: net getdomainsid new dc1: stop samba ; net setdomainsid [copy-from old]; start samba Domain SID is still the "new one". User SID are also different when I look with "rpcclient $> lookupnames". Can this be a Problem, when I unjoin and rejoin all workstations to Domain?

...Below are the logs from log.winbindd from wbinfo -i <ads id> using my ads id. I appreciate any help with this odd behavior. [2008/11/19 13:12:41, 4] winbindd/winbindd_dual.c:fork_domain_child(1207) child daemon request 21 [2008/11/19 13:12:41, 3] winbindd/winbindd_async.c:winbindd_dual_lookupname(442) [20054]: lookupname ADS+<ads id> [2008/11/19 13:12:41, 3] winbindd/winbindd_rpc.c:msrpc_name_to_sid(295) rpc: name_to_sid name=ADS\<ads id> [2008/11/19 13:12:41, 3] winbindd/winbindd_rpc.c:msrpc_name_to_sid(299) name_to_sid [rpc] ADS\<ads id> for domain ADS [2008/11/1...