similar to: Domain SID does not match built in domain groups' SIDs...

Hello, I have run into some performance issues after adding bricks to a 3.3.1 volume. Basically I am seeing very high CPU usage and extremely degraded performance. I started a re-balance but stopped it after a couple days. The logs have a lot of entries for split-brain as well as "Non Blocking entrylks failed for". For some of the directories on the client doing an ls will show multiple

Colleagues, I am running smbd in a setup described in http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html#id2604553 under "Winbind is not used; users and groups are local". Samba is running in the security=domain mode, but all Windows users are being mapped to Unix users in /etc/passwd. Now I need to run winbindd for Squid authentication. The problem is, as soon as

Hi, I'm trying to join my Linux file server to an AD domain. I've looked at several different documents describing how to do this, but I still am not able to get everything to work correctly. I am able to join my domain, but I cannot use smbclient to connect to another file server in the domain, nor can I connect to the samba server from my desktop PC. My kerberos tickets seem to be in

Hi All, Give Me some good idea, about.. how to manage 3000 Samba Connection. in my network i have 6 Samba File Server.. Volumes Are common in all Samba servers (GPFS Volume + 6 GPFS Nodes) (so 6 Servers are there to share this connection. 500 X 6 ) at a time.. i am getting maximum 3000 samba connection and almost all connection is opening 150MB to 300MB file (3D Animation Files) total opened

Environment: try to join and setup simple file-share in a sub-domain off from an AD forest which operates under 2008R2 forest, and domain functional level; while keeping primary domain for SSH remote logins Samba is running Version 3.6.23-24.el6_7 running on CentOS6.7. RPM based 'net ads join -k' , 'net ads keytab list', 'net testjoin -k' reflected positive results. I can

We are using SAMBA 3.6.6 on Centos 5 with the acl_tdb VFS module. Our share is backed by storage on a SAN devices that does not support ACLs or extended attributes ... so we're trying the acl_tdb module as a mechanism to support Windows ACLs. We have verified that samba has ACL support enabled, and ACL support works find if we export the share from the local EXT4 filesystem. When trying to

I just upgraded to 0.22.0 from 0.18.4 and I''m running into what I think are problems due to changes in scope rules. In my site.pp manifest, I have the following: import "classes/*" node nfsserver { include nfsserver } node webserver { include webserver } class cluster1_sites { website { "example.com": ...; "example2.com": ...; } } node

Hi, How can I remove the "domain PHOENIX" SID from the PDC? It was a test domain I had set up before this machine went live around 18 months ago. I believe this is the issue that's causing me to have problems migrating this PDC to a new machine. This is the output from the current PDC: phoenix:/ # net getlocalsid SID for domain PHOENIX is: S-1-5-21-3597458131-155160113-1223051555

Hello, I have Samba setup with as a domain member server (security = ADS). wbinfo -g works wbinfo -u works getent passwd works getent group works There is a directory name /dir/shared with the following permissions. drwxrwxrwx 2 root users The information shows up fine in Windows on the security tab root (Unix User\root) usesrs (Unix Group\uses) Now, I go into the Linux

I'm migrating from a very very old Samba (Cobalt Qube Network Appliance, seemingly some 2.1... Samba version). I've got over a hundred Windows XP clients that have "joined" the existing domain. I want to migrate all those memberships to the new Samba so I don't have to visit every one of those client machines individually. I think I know how ...except I haven't been able

Hello, I am using smaba-3.0beta3 on linux (RedHat 7.3). I noticed that 'net rpc vampire' does not retrieve the existing SIDs from the domain PDC, rather it creates new ones. This is a problem if users have files saved locally on their NT workstations, as the SIDs won't match after the migration to samba PDC. Is there a way to migrate from an NT PDC to a samba one and still

I have configured my Samba to be a member of a previously existent PDC, that has the user accounts. I have created all the users with 'smbpasswd -a username', but my problem is with the users that already exist at the Linux server: 'user1' is an user that exists in the domain and in the Linux machine, but when I try to access to the linux server the first time, samba reports

I would like to migrate users into my Samba3 server. Problem is I have a sambaDomainSID that conflicts with my Windows domain SID. My backend is LDAP. I'm not sure what to delete so I can get my SambaDomainSid in sync with Windows domain SID and start migrating users. Thanks! TJ ------------------------ Cannot import users from LABOR at this time, as the current domain:

I found part of the problem... the Red Hat 9 kernel does not ship with the ACL patches installed. ;-) Does anyone know if there is a repository that hosts Red Hat kernel RPMs with the ACL patches applied? Michael St. Laurent <> wrote: > I have a newly upgraded Red Hat 9 Samba server (now ver. 3.04, > formerly ver. 2.2.7a) on which I would like to start using ACLs to > provide the

Hello, If I have a PDC with a netbios name FIRST, and I want to add a BDC - named SECOND - do these machines need to have the same SIDs, or different (I just copied files / settings from PDC to BDC and I'm not sure what to do next)? Tomek

Hello good people of Samba, I've been working with the latest Samba (3.0.11pre2) and have noticed that between 3.0.11pre1 and 3.0.11pre2, wbinfo --user-sids <SID> has stopped working. I have confirmed that going back to version 3.0.11pre1 (everything else being held steady) corrects the error I'm seeing. #wbinfo -n <username> <big long SID> #wbinfo --user-sids=<big

Hi Guys, Just a quick one...I use ldap backend for samba users and unix(PAM+NSS) users. If I was creating a new user/group/computer manually do the RID and UID/GID have to match up somehow or something?? I mean I've been reading somewhere that that RID should be somethings like UID+2x1000 or something?? Algorithmicbase?? Whats this all about? Am I making any sense? Cheers, Rhys

Hi I have PDC on samba 3.0.10 with LDAP (OpenDirectory on MacOSX). I need configure fileserver(both NFS and SMB) in domain(samba 3.0.25a on Solaris) Server get NSS information from LDAP(OpenDirectory) and winbind get UIDs from NSS: idmap backend = nss Users authentication works fine. Users can use shares. I can view ACLs, but can't set it. log: > [2007/08/28 16:47:44, 0]

I have a samba server running on a Linux RHEL5 system. The system uses nss_ldap and gets passwd and group information from a non-windows ldap server. The smb.conf file is using security=ads and spnego in order to user Kerberos tickets rather than ntlmv2. I have done a net ads join, and the authentication is working fine, however when I try to set an ACL on a file from a windows client

Hi All, I cannot access/write to shares so I turned the logging level up to 3. This is the error from the 'test' share while attempting to create a new folder: [2009/09/29 09:57:45, 3] lib/util_sid.c:string_to_sid(223) string_to_sid: Sid @domain users does not start with 'S-'. I am using samba 3.0.36 on gentoo smb.conf server string = Samba Server %v log level = 3 log