From: Gerard Hooton on
Can anyone help me with this, I am badly stuck on this?

//Ger


--
Gerard Hooton.
Department of Microelectronic Engineering U.C.C.
Butler Building,
Enterprise Centre,
North Mall.
Cork.

Tel: +353 21 4904576
Fax: +353 21 4904573
http://www.ue.ucc.ie/


-----Original Message-----
From: Gerard Hooton <g.hooton(a)ucc.ie>
Reply-to: g.hooton(a)ucc.ie
To: samba(a)lists.samba.org
Subject: Problems with SID
Date: Fri, 04 Jun 2010 12:35:49 +0100
Mailer: Evolution 2.28.3

Hello All,

Problem
==========
/var/log/samba/log.smbd has the following

smbd version 3.2.5 started.
Copyright Andrew Tridgell and the Samba Team 1992-2008
[2010/06/04 12:22:41, 1]
passdb/pdb_interface.c:pdb_default_uid_to_rid(1228)
Could not peek rid out of sid
S-1-5-21-1025115222-3498510805-2498371278-1000

More info:
===========
net getlocalsid yeilds :-
SID for domain SCOIL is: S-1-5-21-399018149-2014173726-3152914669

In the LDAP DB I have :-
sambaDomainName=BBNS,ou=domains,dc=bbns,dc=ie
sambaSID=S-1-5-21-399018149-2014173726-3152914669

I am using Debian 5

Any help to debug this is welcome

//Ger


--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Rob Townley on
On Fri, Jun 4, 2010 at 10:10 AM, Gerard Hooton <g.hooton(a)ucc.ie> wrote:
> Can anyone help me with this, I am badly stuck on this?
>
> //Ger
>
>
> --
> Gerard Hooton.
> Department of Microelectronic Engineering U.C.C.
> Butler Building,
> Enterprise Centre,
> North Mall.
> Cork.
>
> Tel: +353 21 4904576
> Fax: +353 21 4904573
> http://www.ue.ucc.ie/
>
>
> -----Original Message-----
> From: Gerard Hooton <g.hooton(a)ucc.ie>
> Reply-to: g.hooton(a)ucc.ie
> To: samba(a)lists.samba.org
> Subject: Problems with SID
> Date: Fri, 04 Jun 2010 12:35:49 +0100
> Mailer: Evolution 2.28.3
>
> Hello All,
>
> Problem
> ==========
> /var/log/samba/log.smbd has the following
>
> smbd version 3.2.5 started.
>  Copyright Andrew Tridgell and the Samba Team 1992-2008
> [2010/06/04 12:22:41,  1]
> passdb/pdb_interface.c:pdb_default_uid_to_rid(1228)
>  Could not peek rid out of sid
> S-1-5-21-1025115222-3498510805-2498371278-1000


From what i understand, the rid in this case is 1000 (Administrator
level account). Domain Controllers should have the same SID as your
SCOIL sid, but this is clearly different. So maybe the mapping from
userids in winbind is messed up?


>
> More info:
> ===========
> net getlocalsid yeilds :-
> SID for domain SCOIL is: S-1-5-21-399018149-2014173726-3152914669
>
> In the LDAP DB I have :-
> sambaDomainName=BBNS,ou=domains,dc=bbns,dc=ie
>        sambaSID=S-1-5-21-399018149-2014173726-3152914669
>
> I am using Debian 5
>
> Any help to debug this is welcome
>
> //Ger
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

You should read the thread in the last couple of weeks on messed up
uid/gid/rid mappings in this thread from May 21:
[Samba] Moving to another idmap backend
http://lists-archives.org/samba/53183-moving-to-another-idmap-backend.html


Does the client happen to be Win7? Mark Russinovich of SysInternals,
now Microsoft does not see the need for SIDs and was pushing for them
to be removed, but i doubt that has happened yet.


http://msdn.microsoft.com/en-us/library/aa379649%28VS.85%29.aspx
SECURITY_NT_NON_UNIQUE S-1-5-21 SIDS are not unique.

Mark Russinovich on sids
http://blogs.technet.com/b/markrussinovich/archive/2009/11/03/3291024.aspx
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba