search for: sambasid

Hi, I've configured the SambaSID of my domain manualy with "net setlocalsid S-1-...." I've done a check with "net getlocalsid" and everything seems to be ok, but when I add a new user with smbpasswd, his sambaSID doesn't correspond to the Domain SambaSID ! And in the LDAP directory, the sambaSID of the...

...ving some problems to have a client Windows XP, I believe all systems could have the same issue, using Ldap authentication with Samba. This is a native OpenFiler configuration with a local LDAP server for Samba shares. The problem is that sharing is never authenticated where my suspicious is about sambaSID. Basically I create a test user called "rlvcosta". This user was created into LDAP as : dn: uid=rlvcosta,ou=People,dc=flores,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: sambaSamAccount homeDirectory: /dev/null loginShell: /bin/false cn: rlvcosta givenName: r...

...rol policy like in the idealx manual. The LDAP log file : Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH base="ou=Users,dc=r-kb,dc=si" scope=2 deref=0 filter="(&(uid=*)(objectClass=sambaSamAccount))" Oct 20 14:34:31 kope slapd[6707]: conn=1 op=28 SRCH attr=uid sambaSid displayName description sambaAcctFlags Oct 20 14:34:32 kope slapd[6707]: conn=1 op=28 SEARCH RESULT tag=101 err=0 nentries=511 text= Oct 20 14:34:32 kope slapd[6707]: conn=1 op=29 SRCH base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)...

...onnection(677) Failed to issue the StartTLS instruction: Connect error [2005/07/27 18:21:52, 1] lib/smbldap.c:another_ldap_try(1011) Connection to LDAP server failed for the 1 try! [2005/07/27 18:21:53, 1] passdb/pdb_ldap.c:init_sam_from_ldap(553) init_sam_from_ldap: no sambaSID or sambaSID attribute found for this user user1 [2005/07/27 18:21:53, 1] passdb/pdb_ldap.c:ldapsam_getsampwnam(1346) ldapsam_getsampwnam: init_sam_from_ldap failed for user 'user1'! Any suggestion please? _______________________________________________________________...

...after we decided to update samba from 3.0.5a to 3.0.21c now we can't do that anymore!. In adding a machine, the "wellcome to domain XXX" message appears, but after rebooting the machine it doesn't works!. Looking the openldap entries, now we are having these kind of entries: sambaSID: S-1-5-21-2502698289-3639879065-4582 sambaPrimaryGroupSID: S-1-5-21-2502698289-3639879065-7544774837-515 note that "one part" of the Samba SID is missing, the correct should be: sambaSID: S-1-5-21-2502698289-3639879065-7544774837-4582 so, I tried to fix the sambaSID attribute by hand o...

This is probably pretty simple. The following error appears in my logs since upgrading from version 2.2.8 to 3.0.1: [2003/12/25 14:44:09, 0] rpc_server/srv_util.c:get_domain_user_groups(372) get_domain_user_groups: primary gid of user [testuser] is not a Domain group! get_domain_user_groups: You should fix it, NT doesn't like that I'm guessing that my user's primary group

...73: # all entries = does_sid_exist($sid,$config{scope}) sub does_sid_exist { my $sid = shift; my $dn_group=shift; my $mesg = $ldap->search ( base => $dn_group, scope => $config{scope}, filter => "(sambaSID=$sid)" #filter => "(&(objectClass=sambaSAMAccount|ob$ ); $mesg->code && die $mesg->error; #this is line 473 return ($mesg); } but I'm not sure why I am getting that error. (sambaSID=$...

...web-02.de/mail/client/IywWde3X0uo/dereferrer/?redirectUrl=https%3A%2F%2Fwiki.samba.org%2Findex.php%2FMigrating_a_Samba_NT4_Domain_to_Samba_AD_%28Classic_Upgrade])) is a section "Prevent failure due to duplicate SID's". I executed the script and got the following output: Duplicate id:  sambaSID: S-1-5-21-3094887387-3947034481-3986156802 How can I fix that?

I currently have in my slapd.conf: index sambaSID eq the release notes for 3.0.23 say I need index sambaSID sub can I use index sambaSID eq,sub TIA

...x that is used for groups when these are added to the LDAP directory. If this parameter is unset, the value of ldap suffix will be used instead. But this is not true, or I have a mistake in my configuration. The LDAP-Search ist done with scope=2 (sub). 2 Posix Entries are found and resolved to sambaSid correctly. Then the SIDs are searched and this search use the base from "ldap user suffix". The result is, that instead of finding 2 users in 2 different OUs, only 1 user is found. So, is this a bug? Is the man page wrong? The problem is shown here, in the slapd.log. slapd[27069]:...

...,dc=ru dn: ou=groups,ou=arkhangelsk,dc=rugion,dc=ru dn: ou=computers,ou=arkhangelsk,dc=rugion,dc=ru dn: ou=users.deleted,ou=arkhangelsk,dc=rugion,dc=ru > # the registered domains > # ldapsearch -xLLL -H ldapi:/// '(&(sambadomainname=*)(objectclass=sambadomain))' sambaDomainName sambaSID root at pdc:~# ldapsearch -xLLL -H ldapi:/// '(&(sambadomainname=*)(objectclass=sambadomain))' sambaDomainName sambaSID No such object (32) root at pdc:~# ldapsearch -xLLL -H ldapi:/// '(objectclass=sambasamaccount)' -b ou=arkhangelsk,dc=rugion,dc=ru sambaacctflags samba...

...up and made several DNS modification to match those of a Windows PDC. I still cannot get rid of the error. So here are the remaining LDAP queries without response: SRCH base="dc=makamaka,dc=home" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=4)(|(sambaSIDList=s -1-5-21-2966583388-1241265182-3898909196-1004)(sambaSIDList=s-1-5-21-2966583 388-1241265182-3898909196-515)(sambaSIDList=s-1-1-0)(sambaSIDList=s-1-5-2)(s ambaSIDList=s-1-5-11)))" SRCH base="dc=makamaka,dc=home" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)...

dn: cn=Domain Admins,ou=groups,dc=mydomain objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 512 cn: Domain Admins description: Netbios Domain Administrators sambaSID: S-1-5-21-3936576374-1604348213-1812465911-512 sambaGroupType: 2 displayName: Domain Admins memberUid: root memberUid: sadmin dn: cn=Domain Users,ou=groups,dc=mydomain objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 513 cn: Domain Users description: Netbios Domai...

...unt objectClass: posixAccount sambaLogonTime: 0 sambaHomeDrive: _HOMEDRIVE_ uid: nobody uidNumber: 999 cn: nobody sambaLogoffTime: 2147483647 sambaPwdLastSet: 0 loginShell: /bin/false sambaAcctFlags: [NU ] sambaProfilePath: \\_PDCNAME_\profiles\ gidNumber: 514 sambaPwdMustChange: 2147483647 sambaSID: S-1-5-21-3967911966-3537913209-3658253730-2998 sambaNTPassword: NO PASSWORDXXXXXXXXXXXXXXXXXXXXX sambaPwdCanChange: 0 homeDirectory: /dev/null sambaKickoffTime: 2147483647 sn: nobody sambaHomePath: \\_PDCNAME_\homes dn: cn=Domain Users,ou=Groups, o=smb_dc, dc=xap,dc=ul sambaSID: S-1-5-21-39679119...

I just installed Red Hat v. 6.2 and would like to configure SAMBA. I was wondering if you could point me to some good documentation sites that can lead me step by step through setup and configuration of SAMBA. I'll be experimenting with it in the meantime but your help will be extremely helpfull. Thank you, Jerry Lawson MCSE, MCP +Internet

...Backup Operators (S-1-5-32-551) -> Backup Operators Replicators (S-1-5-32-552) -> Replicators The strange thing is, if I try on Win XP to search groups, i see in logs: smbldap_search_paged: base => [dc=example,dc=sk], filter => [(&(objectclass=sambaGroupMapping)(sambaGroupType=2)(sambaSID=S-1-5-21-2390795950-2727105968-4008069955*))],scope => [2], pagesize => [1024] smbldap_search_paged: base => [dc=example,dc=sk], filter => [(&(objectclass=sambaGroupMapping)(sambaGroupType=4)(sambaSID=S-1-5-21-2390795950-2727105968-4008069955*))],scope => [2], pagesize => [1...

...suffix "dc=xxx" rootdn "cn=Administrador,dc=xxx" rootpw "{SSHA}xxx" directory /var/lib/ldap/ checkpoint 1024 5 cachesize 10000 index objectClass,uidNumber,gidNumber,memberUid eq index member,mail eq,pres index cn,displayname,uid,sn,givenname sub,eq,pres index sambaSID,sambaPrimaryGroupSID,sambaDomainName eq index default sub ***************************** LDIF: ***************************** # This file was generated on 2008-11-05 at 11:20:00 # from the ldap://172.16.152.200:389 (bound as cn=Administrador,dc=xxxx) # by Softerra LDAP Administrator v3 [ h...

...<GEN1> line 8. adding new entry: uid=nobody,ou=Users,dc=itouchaudev,dc=com failed to add entry: sambapwdlastset: attribute type undefined at /usr/local/sbin/smbldap-populate line 388, <GEN1> line 9. adding new entry: cn=Domain Admins,ou=Groups,dc=itouchaudev,dc=com failed to add entry: sambasid: attribute type undefined at /usr/local/sbin/smbldap-populate line 388, <GEN1> line 10. adding new entry: cn=Domain Users,ou=Groups,dc=itouchaudev,dc=com failed to add entry: sambasid: attribute type undefined at /usr/local/sbin/smbldap-populate line 388, <GEN1> line 11. adding new entr...

samba 3.0.2 smbldap-tools 0.8.4 RH 9 nss_ldap configured pam_ldap NOT configured LDAP passwd backend winxp pro domain member Hello, i've configured smbldap-tools in smb.conf to manage users from usrmgr.exe. It works at group creation but have a strange behavior in user creation. In the LDAP there are two manually created accounts; Administrador & invitado, both posixAccount and

...d the process to join the machines automatically to our domain with some tools. Our Domain server runs with samba 3.0.13, OpenLDAP as the backend and smbldap-tools. In most cases the machines could join the domain without any problems. But sometimes samba tries to join them with an already existing sambaSID so the join will fail. The corresponding entries in the log file looks like: [2005/11/01 16:11:57, 0] passdb/pdb_ldap.c:ldapsam_add_sam_account(1795) ldapsam_add_sam_account: SID 'S-1-5-21-3654624081-408594837-1692793938-3108' a lready in the base, with samba attributes [2005/11/01 16:11...