similar to: Account Unknown: SID not resolvable

On Thu, 16 Nov 2023 13:14:56 -0500 James Atwell via samba <samba at lists.samba.org> wrote: > Hello, > > > > When viewing the Security tab of a user object I find 2 > username/groups that display their SID as opposed to their username > with Account Unknown. I tried to use 'wbinfo -s' with the SID but > it's unable to return a result. Using a well

> -----Original Message----- > From: samba <samba-bounces at lists.samba.org> On Behalf Of Rowland > Penny via samba > Sent: Thursday, November 16, 2023 1:28 PM > To: samba at lists.samba.org > Cc: Rowland Penny <rpenny at samba.org> > Subject: Re: [Samba] Account Unknown: SID not resolvable > > On Thu, 16 Nov 2023 13:14:56 -0500 > James Atwell via samba

Hello,     I would like to share some info on how I was able to successfully run an online backup after several failed attempts. I would constantly get the following error when attempting to run an online backup. ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A process has requested access to an object but has not been granted those access rights.') Looking

On 5/16/2020 5:00 AM, Rowland penny via samba wrote: > On 15/05/2020 19:52, James Atwell via samba wrote: >> Hello, >> >> ??????? I upgraded two DC's to 4.12.2 from 4.11.6 before I noticed >> authentication issues with a couple Netgear ReadyNAS we have. For >> reference I have a total of 6 DC's with 4 running 4.11.6 and two now >> running 4.12.2.?

On 5/16/2020 9:55 AM, Rowland penny via samba wrote: > On 16/05/2020 14:40, James Atwell wrote: >> >> On 5/16/2020 5:00 AM, Rowland penny via samba wrote: >>> On 15/05/2020 19:52, James Atwell via samba wrote: >>>> Hello, >>>> >>>> ??????? I upgraded two DC's to 4.12.2 from 4.11.6 before I noticed >>>> authentication

Hello,     I recently upgrade Samba to 4.7.0 and enabled the Authentication and Authorization audit support. One of the first events I see is from a disabled user account. [2017/09/26 12:24:17.894767,  3, pid=1257, effective(0, 0), real(0, 0)] ../auth/auth_log.c:760(log_authentication_event_human_readable)   Auth: [Kerberos KDC,ENC-TS Pre-authentication] user [(null)]\[bdiley at

Hello, Attempting to run samba-tool domain backup online --server=pfdc1.domain.local --targetdir=/backups/ -U administrator gives the following errors. Pre-loading the Samba 4 and AD schema Unable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs Partition[DC=domain,DC=local] objects[1716/1738] linked_values[0/839] ../lib/ldb/ldb_tdb/ldb_index.c:2352:

Rowland, I decided to start over with a fresh install and attempted again. Only change I made was to start my mappings at 10000. I gave 'Domain Users' group gid 10000 and 'tuser' has uid 10001. Still didn't work btw. dn: CN=Test User,CN=Users,DC=domain,DC=local objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: Test User sn:

Hi Rowland, I forgot to tell you the results were from my Domain Controller and not the member server. Member server returned something to the effect of 'user not found'. I am only starting the 3 services(smbd,nmbd and windbindd) listed in the wiki. Should I be starting Samba with command line switches to start as a member server? Is that even possible? Thanks for you

Hello, Updated samba from 4.4.5 to 4.5.0. All DC's are Ubuntu 12.04.5 LTS. I install samba from source(./configure,make,make install). Looking at the release notes I see the section on "replPropertyMetaData Chnages". I run 'samba-tool dbcheck --cross-ncs --fix --yes' and see the errors and samba attempts to fix. ERROR: unsorted attributeID values in

Rowland, That was the issue. Windows computer management console showed 0 connections. That obviously wasn't correct. A reboot corrected the issue. ACL's working as expected. I probably should have ran a 'netstat' to verify. Any best practices on who should or shouldn't have uid's or gid's set in AD? I've read where the Administrator account should

Hai James, Thanks, thats exactly what we needed. I'll comment below. > -----Oorspronkelijk bericht----- > Van: James Atwell [mailto:james.atwell365 at gmail.com] > Verzonden: donderdag 13 augustus 2020 14:46 > Aan: samba at lists.samba.org > CC: L.P.H. van Belle > Onderwerp: Re: [Samba] Samba DNS fails when queried with > nslookup commands > > Hi Louis and

Greetings, Hoping someone can shed some light on this. I've been searching for over a week and cannot find information on how Samba generates SID's from Unix UID's and GID's. I keep running into situations where after adding a new user to my CentOS server all other users are suddenly prevented from accessing shares that have a group ACL assigned. I finally figured out that

Hi Rowland, If you don't mind I like to post my member server configuration as I attempt again. This is how my member server(Ubuntu 12.04) is configured after fresh install and prior to Samba build. Anything I'm missing that could cause my issue as I proceed? I assume no other prerequisites must be done on the other DC's either? Thanks. /*# From Wiki for DC build*/ apt-get

Rowland, Thanks so far for the assistance. I have a question about setting up shares on a member server. How do I map to users or groups that do not display in AD(Everyone,System,Authenticated Users)? On 1/2/2015 2:08 PM, Rowland Penny wrote: > On 02/01/15 18:59, James wrote: >> Rowland, >> >> That was the issue. Windows computer management console showed 0

I am using either DOMAIN or ADS for authentication and am trying to understand how UID/GID mapping rules are triggered. This[1] seems to suggest that if I do not specify the idmap uid/gid parameters in smb.conf, then authenticated usernames are mapped to "local" user accounts having the same name. If, however, I _do_ specify idmap uid/gid then one of the idmap_* allocator modules is

Rowland, I've gotten a bit further. It appears my use of '.local' is causing the issue from what I've researched. I ran '|/etc/init.d/avahi-daemon stop'. |This allowed me to successfully join the domain. Enter administrator at DOMAIN.LOCAL's password: Using short domain name -- DOMAIN Joined 'PFMEMBER1' to dns domain 'domain.local' DNS Update

Hi Rowland, Yes. When I create a share I get the expected 'Everyone' group under 'Share Permissions' for example. I'm assuming I must map this object to Unix so all windows users can access this share. However in AD there is no 'Everyone' group to set a gid. I wouldn't necessarily expect one either. I'm currently under the mind set that with a member

Am 30.06.2016 um 12:00 schrieb mathias dufresne: > Sorry to ask that but this thread is quite long and that makes > understanding difficult, at least to me. What is the status of all that? I > believe at one moment it was writtent using winbindd is solution, that with > winbindd instead of winbind we don't need to synchronize idmap.ldb to get > GPOs working well even with

On 10/29/2018 1:57 PM, Rowland Penny via samba wrote: > On Mon, 29 Oct 2018 13:20:18 -0400 > James Atwell via samba <samba at lists.samba.org> wrote: > >> Hello List, >> I'm receiving several of these messages in my samba >> log file. I'm not entirely sure what the errors are referencing >> either. I'm under the assumption DNS