On Tue, 2013-07-23 at 20:41 -0300, Jonis Maurin Ceará wrote:
Hi.
I'm trying to convert from s3 to s4 using classic upgrade. I have LDAP
backend and i'm getting this error:
Ignoring group 'pgrd' S-1-5-21-511255529-1355219746-1726288727-3007 listed
but then not found: Unable to enumerate group members,
(-1073741596,NT_STATUS_INTERNAL_DB_CORRUPTION)
The problem is that this group is valid and almost all our users are in
this group, so i can't just ignore. Brownsing my ldap i can find and see
this group and this SID. What could be wrong?
How are they members of this group?
The thing that Samba's classicupgrade code does that the operational
Samba 3.x DC didn't do by default is set 'ldapsam:trusted = yes'. This
means that if you were using groupOfNames based groups, we might not
read that correctly in our internal handler, but nss_ldap would have, if
configured.
It's just a guess, but somewhere to start. Otherwise, perhaps look at
this group and see if there is anything different about it? Can you
show me the LDIF?
Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
