search for: sid2xid

...right now, I now have hundreds (thousands) of messages appearing in >> syslog along the lines of: Unable to convert SID (S-1-1-0) at index 5 >> in user token to a GID. Conversion was returned as type 0, full >> token: >> >> 'net cache list' confirms: Key: IDMAP/SID2XID/S-1-1-0 Timeout: >> 10:41:35 Value: -1:N >> >> I've uncommented the idmap line above, to no effect. >> >> The same config works just fine on the other DC. >> >> What can I check next? >> >> Thanks, >> >> Jonathan >> &...

...in the idmap/winbind area. I have recently added rfc2307 attributes to my AD, and am in the process of switching over. This means that I still have (unintentionally) some files/directories/etc. around with old UIDs e.g. 3000007, rather than my rfc2307 specified UIDs. What I am seeing is that the SID2XID mapping is initially correct for a given user (i.e. resolves to the rfc2307 UID I have set in AD), but at some point in the future, without any apparent trigger, the SID2XID mapping *changes* and turns into the old UID e.g. 3000007. I am using winbind in /etc/nsswitch.conf; I think that what might...

...> I have recently added rfc2307 attributes to my AD, and am in the > process of switching over. This means that I still have > (unintentionally) some files/directories/etc. around with old UIDs > e.g. 3000007, rather than my rfc2307 specified UIDs. > > What I am seeing is that the SID2XID mapping is initially correct for > a given user (i.e. resolves to the rfc2307 UID I have set in AD), but > at some point in the future, without any apparent trigger, the SID2XID > mapping *changes* and turns into the old UID e.g. 3000007. > > I am using winbind in /etc/nsswitch.conf;...

...al(0, 0), class=winbind] ../source3/winbindd/wb_sids2xids.c:95(wb_sids2xids_send) SID 0: S-1-5-21-504852097-2741213702-4166728410-500 [2014/04/03 10:20:44.502290, 10, pid=1223, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-504852097-2741213702-4166728410-500]: value=[70003:U] [2014/04/03 10:20:44.502335, 10, pid=1223, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-504852097-2741213702-4166728410-500]: id=[70003], endpt...

...2016 ART] (60 seconds ahead) Exporting groups smbldap_search_ext: base => [dc=gruporesasco,dc=local], filter => [(objectclass=sambaGroupMapping)], scope => [2] ldapsam_setsamgrent: 38 entries in the base! init_group_from_ldap: Entry found for group: 512 Adding cache entry with key=[IDMAP/SID2XID/S-1-5-21-56882046-558956869-3161115699-512] and timeout=[Mon May 16 23:33:57 2016 ART] (604800 seconds ahead) Adding cache entry with key=[IDMAP/GID2SID/512] and timeout=[Mon May 16 23:33:57 2016 ART] (604800 seconds ahead) init_group_from_ldap: Entry found for group: 513 Adding cache entry with...

...SID[ 5]: S-1-5-32-554 SID[ 6]: S-1-5-32-545 It is not like only one specific SID is affected. I find this for many different ones, including S-1-1-0. net cache list is showing me funny stuff like this: Key: IDMAP/GID2SID/3000017 Timeout: 11:23:09 Value: - (expired) Key: IDMAP/SID2XID/S-1-5-32-545 Timeout: 11:40:46 Value: -1:N ... Key: IDMAP/SID2XID/S-1-5-21-1449862128-1716478392-3139764938-3708 Timeout: 11:41:17 Value: -1:N ... Key: IDMAP/SID2XID/S-1-5-21-1449862128-1716478392-3139764938-3680 Timeout: 11:38:37 Value: -1:N (expired) At the moment I'm...

...S-1-5-32-545 > > It is not like only one specific SID is affected. I find this for many > different ones, including S-1-1-0. > > net cache list is showing me funny stuff like this: > > Key: IDMAP/GID2SID/3000017 Timeout: 11:23:09 Value: - (expired) > Key: IDMAP/SID2XID/S-1-5-32-545 Timeout: 11:40:46 Value: -1:N > > ... > > Key: IDMAP/SID2XID/S-1-5-21-1449862128-1716478392-3139764938-3708 > Timeout: 11:41:17 Value: -1:N > > ... > > Key: IDMAP/SID2XID/S-1-5-21-1449862128-1716478392-3139764938-3680 > Timeout: 11:38:37...

...0), class=winbind] ../../source3/winbindd/wb_sids2xids.c:113(wb_sids2xids_send) SID 0: S-1-5-21-2104135160-127914087-578546287-1107 [2020/09/10 17:15:13.121785, 10, pid=162, effective(0, 0), real(0, 0)] ../../source3/lib/idmap_cache.c:57(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-2104135160-127914087-578546287-1107]: value=[-1:N] [2020/09/10 17:15:13.121859, 10, pid=162, effective(0, 0), real(0, 0)] ../../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-2104135160-127914087-578546287-1107]: id=[4294967295], e...

...AD property making Samba stutter. Here is the pivotal point in the traces : 1: Successful session [xxxx-xx-xx xx:xx:xx, 10, pid=xxx, effective(0, 0), real(0, 0)] Create local NT token for problemuser [xxxx-xx-xx xx:xx:xx, 10, pid=xxx, effective(0, 0), real(0, 0)] Parsing value for key [IDMAP/SID2XID/S-1-5-21-4107461286-2373360197-1842339316-6863]: value=[36863:B] [xxxx-xx-xx xx:xx:xx, 10, pid=xxx, effective(0, 0), real(0, 0)] Parsing value for key [IDMAP/SID2XID/S-1-5-21-4107461286-2373360197-1842339316-6863]: id=[36863], endptr=[:B] [xxxx-xx-xx xx:xx:xx, 10, pid=xxx, effective(0, 0), real(0...

...: SID_NAME_USE_NONE (0) sid : * sid : S-0-0 result : NT_STATUS_UNSUCCESSFUL but further on in the file (probably coming from a random SMB file access) I see: Parsing value for key [IDMAP/SID2XID/S-1-5-21-3505373935-2275348003-3197909400-1104]: value=[3000016:B] [2016/07/11 01:10:56.209343, 10, pid=24476, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-3505373935-2275348003-3197909400-1104]: id=[300001...

..., 0), class=winbind] ../source3/winbindd/wb_sids2xids.c:113(wb_sids2xids_send) SID 0: S-1-5-21-3239498231-402109693-3067992304-72680 [2018/02/21 15:33:44.920476, 10, pid=21519, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-3239498231-402109693-3067992304-72680]: value=[41312:U] [2018/02/21 15:33:44.920513, 10, pid=21519, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-3239498231-402109693-3067992304-72680]: id=[41312],...

...class=winbind] ../source3/winbindd/wb_sids2xids.c:109(wb_sids2xids_send) SID 0: S-1-5-21-***REPLACE-DDOMAINSID-WITHTHIS*-1406 [2015/04/15 16:22:20.124897, 10, pid=9576, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-***REPLACE-DDOMAINSID-WITHTHIS*-1406]: value=[203:U] [2015/04/15 16:22:20.125024, 10, pid=9576, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-***REPLACE-DDOMAINSID-WITHTHIS*-1406]: id=[203]...

.../winbindd/wb_sids2xids.c:113(wb_sids2xids_send) > SID 0: S-1-5-21-3239498231-402109693-3067992304-72680 > [2018/02/21 15:33:44.920476, 10, pid=21519, effective(0, 0), > real(0, 0)] > ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) > Parsing value for key > [IDMAP/SID2XID/S-1-5-21-3239498231-402109693-3067992304-72680]: > value=[41312:U] > [2018/02/21 15:33:44.920513, 10, pid=21519, effective(0, 0), > real(0, 0)] > ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) > Parsing value for key > [IDMAP/SID2XID/S-1-5-21-3239498231-402109693-...

Hello. I'm facing an seemingly unsolvable problem on the Samba servers I administer (on Debian stable). Those servers are registered on a AD domain. They only serve files and are not registered as domain controllers. For some idendified users (always the same), Winbind periodically (but unpredicably) becomes unable to resolve their names, making their shares unavailable. A "net cache

...tail on the process, but the issue is that right now, I now have hundreds (thousands) of messages appearing in syslog along the lines of: Unable to convert SID (S-1-1-0) at index 5 in user token to a GID. Conversion was returned as type 0, full token: 'net cache list' confirms: Key: IDMAP/SID2XID/S-1-1-0 Timeout: 10:41:35 Value: -1:N I've uncommented the idmap line above, to no effect. The same config works just fine on the other DC. What can I check next? Thanks, Jonathan I can't explain the initial issues I had on this DC, either. After adding rfc2307, this DC si...

...l AD Users which is -1 (FFFF FFFF) wbinfo -n user deliver S-1-5-21-4001112740-1724199908-163113746-1106 SID_USER (1) which is correct ! I get from wbinfo -S S-1-5-21-4001112740-1724199908-163113746-1106 as result -1 ! In the Winbind log i get : i get from the log Parsing value for key [IDMAP/SID2XID/S-1-5-21-4001112740-1724199908-163113746-1106]: value=[-1:N] The Samba Version is : Version 4.2.14-Debian My smb.conf is : [global] netbios name = fs2 workgroup = XDNT security = ADS realm = XDNT.DE encrypt passwords = yes log file = /var/...

..., 0), class=winbind] ../source3/winbindd/wb_sids2xids.c:113(wb_sids2xids_send) SID 0: S-1-5-21-3052942767-4183929206-737583365-1617 [2017/10/16 10:11:21.392939, 10, pid=1440, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-3052942767-4183929206-737583365-1617]: value=[-1:N] [2017/10/16 10:11:21.392946, 10, pid=1440, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-3052942767-4183929206-737583365-1617]: id=[4294967295],...

...sid : * > sid : S-0-0 > result : NT_STATUS_UNSUCCESSFUL > > but further on in the file (probably coming from a random SMB file access) > I see: > > Parsing value for key > [IDMAP/SID2XID/S-1-5-21-3505373935-2275348003-3197909400-1104]: > value=[3000016:B] > [2016/07/11 01:10:56.209343, 10, pid=24476, effective(0, 0), real(0, 0)] > ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) > Parsing value for key > [IDMAP/SID2XID/S-1-5-21-3505373935-2275348003-31...

Hello, I can't get Kerberos authentication works with my Linux clients. Server : samba 4.1.4 (compiled from source) Client : Debian Wheezy with sernet-samba 4.0.17-8 Without Kerberos authentication, everything works : -> the domain users can log with pam_winbind (with ssh, gdm ....). -> "kinit myuser at MYREALM" works fine. -> "wbinfo -K MYDOM\\myuser" works.

...inbindd/wb_sids2xids.c:113(wb_sids2xids_send) > SID 0: S-1-5-21-3052942767-4183929206-737583365-1617 > [2017/10/16 10:11:21.392939, 10, pid=1440, effective(0, 0), > real(0, 0)] > ../source3/lib/idmap_cache.c:56(idmap_cache_find_sid2unixid) > Parsing value for key > [IDMAP/SID2XID/S-1-5-21-3052942767-4183929206-737583365-1617]: > value=[-1:N] > [2017/10/16 10:11:21.392946, 10, pid=1440, effective(0, 0), > real(0, 0)] > ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) > Parsing value for key > [IDMAP/SID2XID/S-1-5-21-3052942767-4183929206-...