search for: sambasidlist

...nd the security tab seems crippled, and usrmgr.exe complains about "the specified local group does not exist" (of course without saying which group) so I dived in to check I found filters like this one below in the ldap log - is that to support nested groups? There are no groups with any sambaSIDList attribute - or, there was no groups with any sambaSIDList attribute until I found that I could not get ownership until I added the SID of the admin account I was using as a sambaSIDList attribute to the admin group, memberuid did not suffice. I tend to believe that something is seriously skew with...

Hi, i'm using samba 3.0.14a with an openldap 2.2.24 as the userdata backend. From time to time i get the following entry in the messages logfile: Sep 15 12:44:37 myserver slapd[8112]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18) Sep 15 12:44:37 atlas last message repeated 2 times Anyone knows what the "sambaSIDList" attribute is for? I can't find this entry in my ldap ("ldapsearch -D ... -b ... | grep sambaSIDList") but the attribute is defined in the samba3.schema (suse92e...

.../28 09:58:35, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2213) ldapsam_getgroup: Did not find group [2006/07/28 09:58:35, 5] lib/smbldap.c:smbldap_search_ext(1179) smbldap_search_ext: base => [ou=groupes,dc=corman,dc=be], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-22-1-0)(sambaSIDList=S-1-22-2-0)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-11)(sambaSIDList=S-1-5-32-544)))], scope => [2] [2006/07/28 09:58:50, 10] lib/smbldap.c:smbldap_search_ext(1237) Failed search for base: ou=groupes,dc=corman,dc=be, error: Timed out () [2006/07...

Dear List, I found some new LDAP attributes in the latest samba.schema, that where definitely not there when setting up our environ- ment. Unfortunately I cant find any description of these attributes, especially sambaSIDList. Does anybody has an definite description of that attribute, how it is used and how it should be administered, as the latest smbldap-tools do not use it... Thanks, Matthias

Hello, My PDC is working but I have some errors on my log, I'm searching since some days but I cannot find why. In log.smbd I have [2006/08/22 16:30:22, 0] lib/util_sock.c:get_peer_addr(1229) getpeername failed. Error was Noeud final de transport n'est pas connect?? And In log.MachineName I have [2006/08/22 19:17:33, 0] auth/auth_util.c:create_local_nt_token(899)

Hello, I have a Samba PDC (3.x) running in a OpenSUSE 10.2 system. The authentication backend is Open LDAP. I want to create a group share (WTCCC) which should be accessible to a group of users (belonging to a group called WTCCC). The users' possess this group as their secondary group (NOT primary). And the share folder would have its gid bit set, so all the writes to the folder

...0 nentries=1 text= Feb 19 18:05:51 server slapd[9204]: conn=3 op=5 SRCH base="ou=Groups,dc=network,dc=local" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=0))" Feb 19 18:05:51 server slapd[9204]: conn=3 op=5 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass Feb 19 18:05:51 server slapd[9204]: conn=3 op=5 SEARCH RESULT tag=101 err=0 nentries=0 text= Feb 19 18:05:51 server slapd[9204]: conn=3 op=6 SRCH base="ou=Groups,dc=network,dc=local" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping...

Hi, I'm trying to use the sambaUserWorkstations option to allow users to log on certain computers only. This option looks great... In fact it looks now a lot better than the 'ldap filter' one than was deprecated with samba 3.0.20... The fact is, if the sambaUserWorkstations option works well with machine names, it doesn't seem to work when specifying groups of machines.

...isible errors, so I went to check the LDAP logs and I only thought this looked a bit strange: May 30 15:02:42 servsso slapd[22129]: conn=79 op=6 SRCH base="ou=grupos,dc=prodesan,dc=com,dc=br" scope=2 deref=0 filter="(&(| (objectClass=sambaGroupMapping)(sambaGroupType=4))(| (sambaSIDList=s-1-5-21-3756370324-611414431-635963119-501) (sambaSIDList=s-1-1-0)(sambaSIDList=s-1-5-2)(sambaSIDList=s-1-5-32-546)))" May 30 15:02:42 servsso slapd[22129]: conn=79 op=6 SRCH attr=sambaSID May 30 15:02:42 servsso slapd[22129]: <= bdb_equality_candidates: (sambaGroupType) index_param fa...

...=1 text= Oct 8 21:54:37 sambaserver slapd[2572]: conn=1115 op=5 SRCH base="dc=rtsbrasil,dc=com,dc=br" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(gidNumber=0))" Oct 8 21:54:37 sambaserver slapd[2572]: conn=1115 op=5 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass Oct 8 21:54:37 sambaserver slapd[2572]: conn=1115 op=5 SEARCH RESULT tag=101 err=0 nentries=0 text= Oct 8 21:54:37 sambaserver slapd[2572]: conn=1115 op=6 SRCH base="sambaDomainName=RTS,dc=rtsbrasil,dc=com,dc=br" scope=0 deref=0 filter="(objec...

...es=5 text= Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaSID=s-1-5-32-544))" Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass Oct 20 14:34:32 kope slapd[6707]: conn=1 op=31 SEARCH RESULT tag=101 err=0 nentries=1 text= Oct 20 14:34:32 kope slapd[6707]: conn=1 op=32 SRCH base="ou=Groups,dc=r-kb,dc=si" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(...

...up and made several DNS modification to match those of a Windows PDC. I still cannot get rid of the error. So here are the remaining LDAP queries without response: SRCH base="dc=makamaka,dc=home" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sambaGroupType=4)(|(sambaSIDList=s -1-5-21-2966583388-1241265182-3898909196-1004)(sambaSIDList=s-1-5-21-2966583 388-1241265182-3898909196-515)(sambaSIDList=s-1-1-0)(sambaSIDList=s-1-5-2)(s ambaSIDList=s-1-5-11)))" SRCH base="dc=makamaka,dc=home" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(sam...

...er_token(474) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2008/04/22 16:12:30, 5] lib/smbldap.c:smbldap_search_ext(1182) smbldap_search_ext: base => [ou=Groups,dc=worldecon,dc=org], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-5-21-2003042500-3127132070-473056770-61000)(sambaSIDList=S-1-5-21-2003042500-3127132070-473056770-513)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-11)(sambaSIDList=S-1-5-21-2003042500-3127132070-473056770-512)(sambaSIDList=S-1-5-32-544)(sambaSIDList=S-1-5-21-2003042500-312713...

...7/08/06 12:25:03, 4] passdb/pdb_ldap.c:ldapsam_getgroup (2213) ldapsam_getgroup: Did not find group [2007/08/06 12:25:03, 5] lib/smbldap.c:smbldap_search_ext (1179) smbldap_search_ext: base => [dc=temple,dc=edu], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(| (sambaSIDList=S-1-22-1-99)(sambaSIDList=S-1-22-2-99) (sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S- 1-5-32-546)(sambaSIDList=S-1-22-2-999)))], scope => [2] [2007/08/06 12:25:04, 0] smbd/server.c:main(960) ERROR: failed to setup guest info. Did something change in the code or am I forgettin...

...quot; (aka "nested" group) - basically by changing the group type from 2 to 4. I could then use the net command to add users from the trusted domain e.g net rpc group addmem projectX "WINDOMAIN\peter " -U "SAMBADOMAIN\Administrator" This would add the sambasidlist attribute to the LDAP entry. e.g. version: 1 dn: cn=projectx,ou=group,o=mydomain.com objectClass: sambaGroupMapping objectClass: posixGroup objectClass: top cn: staff_planning gidNumber: 123 sambaGroupType: 4 sambaSID: S-1-5-21-111111-222222-333333-10123 description: projectX displayName: proj...

...Failed search for base: ou=groups,dc=hfc,dc=com, error: 32 (No such object) () pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 LEGACY: mapping failed for sid S-1-5-32-545 smbldap_search_ext: base => [ou=groups,dc=hfc,dc=com], filter => [(&(|(objectclass=sambaGroupMapping)(sambaGroupType=4))(|(sambaSIDList=S-1-22-1-0)(sambaSIDList=S-1-5-32-544)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2)(sambaSIDList=S-1-5-11)))], scope => [2] Failed search for base: ou=groups,dc=hfc,dc=com, error: 32 (No such object) () pdb_enum_alias_memberships failed: NT_STATUS_UNSUCCESSFUL regdb_open: incrementing refcount (1...

...n_ctx_stack_ndx = 0 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 NT user token: (NULL) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups smbldap_search_ext: base => [ou=Groups,dc=dil,dc=edu], filter => [(&(| (objectclass=sambaGroupMapping)(sambaGroupType=4))(| (sambaSIDList=S-1-5-21-1900305026-286758470-1266315604-501) (sambaSIDList=S-1-22-2-65534)(sambaSIDList=S-1-1-0)(sambaSIDList=S-1-5-2) (sambaSIDList=S-1-5-32-546)))], scope => [2] Failed search for base: ou=Groups,dc=dil,dc=edu, error: 32 (No such object) (unknown) pdb_enum_alias_memberships failed: NT_STATUS...

...m , -|it is necessary to preserve the old SIDs of the user to keep the users -|in touch with the old servers. M$ calles this SID history, which means -|that the old SID is added to new accounts in an AD. -|Does samba have any equal mechanism? so far i found out, that there's an LDAP Attribute sambaSIDList on the subversion server http://tinyurl.com/3edtz. Is this the attribute, which cares about the SID history? It's important to know thanks. -| -|2. Question -|Does net rpc vampire preserve domain trust accounts? The second question is still interesting Regards, Dirk Laurenz Systems Engin...

...tag=101 nentries=0 etime=0 [09/Nov/2005:09:09:26 +0000] conn=262044 op=6 msgId=7 - SRCH base="ou=group,o=domain.co.uk,dc=domain,dc=co,dc=uk" scope=2 filter="(&(objectClass=sambaGroupMapping)(|(displayName=Staff)(cn=Staff)))" attrs="gidNumber sambaSID sambaGroupType sambasidlist description displayName cn objectClass" [09/Nov/2005:09:09:26 +0000] conn=262044 op=6 msgId=7 - RESULT err=0 tag=101 nentries=1 etime=0 [09/Nov/2005:09:09:26 +0000] conn=262044 op=7 msgId=8 - SRCH base="ou=group,o=domain.co.uk,dc=domain,dc=co,dc=uk" scope=2 filter="(&(ob...

...55]: conn=310691 op=62 SRCH base="ou=Group,dc=u4eatech,dc=com" scope=2 deref=0 filter="(&(objectClass=sambaGroupMapping)(|(displayName=domain users)(cn=domain users)))" Feb 1 11:37:30 cygnus_new slapd[30055]: conn=310691 op=62 SRCH attr=gidNumber sambaSID sambaGroupType sambaSIDList description displayName cn objectClass Feb 1 11:37:30 cygnus_new slapd[30055]: conn=310691 op=62 ENTRY dn="cn=Domain Users,ou=Group,dc=u4eatech,dc=com" Feb 1 11:37:30 cygnus_new slapd[30055]: conn=310691 op=62 SEARCH RESULT tag=101 err=0 nentries=1 text= Feb 1 11:37:30 cygnus_new sl...