[Samba] sid not rid - Arrgh~!

2003-07-13 Thread Jim C
Nevermind. I found it.
Once I realized I was looking for an sid  and not an rid it was much 
easier to find.
:-)

Jim C wrote:

There is a command that will get the rid number that the 
convertSambaAccount script needs.  I've seen it and even used it but 
now I can't find it or remember it to save my life.  Could someone 
remind me please?

Jim C.




--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] SID when joining samba domain

2002-12-04 Thread Don Hayward
I'm using a Debian woody based system (partially upgraded to 'testing'
in order to use tls with ldap), with samba_2.2.7 source built by
debian/rules with LDAP turned on, using gcc 3.0.4,
libldap2-tls_2.0.23-14, and libldap2_2.0.23-14.

I'm setting up PDC service -- when I try to join a windows machine
(this is XP) to the domain, I get 'specified user does not
exist' on the windows system and the following lines appear in
log.smbd (with -d 5):

[2002/12/04 11:01:01, 2, pid=22667] passdb/pdb_ldap.c:get_single_attribute(360)
  get_single_attribute: [rid] = [3357]

Here the rid of the machine account (3357) is retrieved from the ldap server.

Then later, this:

[2002/12/04 11:01:01, 5, pid=22667] rpc_server/srv_samr_nt.c:_samr_lookup_names(1191)
  _samr_lookup_names: looking name on SID S-1-5-21-1231883349-2047018666-1483395064
.
.
.
[2002/12/04 11:01:01, 5, pid=22667] rpc_parse/parse_prs.c:prs_uint32(588)
  000c rid[00]  : 1e22 (== 7714)
.
.
.
[2002/12/04 11:01:01, 5, pid=22667] rpc_parse/parse_prs.c:prs_uint32(588)
  0018 user_rid : 1e22
.
.
.
[2002/12/04 11:01:01, 2, pid=22667] passdb/pdb_ldap.c:ldap_search_one_user(262)
  ldap_search_one_user: searching for:[rid=7714]
[2002/12/04 11:01:01, 0, pid=22667] passdb/pdb_ldap.c:pdb_getsampwrid(907)
  We don't find this rid [7714] count=0

And the join fails.  Where is it getting the SID that seems to be
related to the incorrect rid?  How can I get it working?

Thanks.

Don Hayward [EMAIL PROTECTED]
Mote Marine Laboratory  Office: 941.388.4441  Cell: 941.302.4982
1600 Ken Thompson Parkway   Fax: 941.388.4312
Sarasota, FL 34236  See: http://www.mote.org
Independent, non-profit, marine and estuarine research and education facility.
For PGP public key do: http://www.mote.org/~don/donpgp.asc
use "DISCLAIMER"; # We run Debian Linux
Taxes feed the starving and clothe the naked.








Don Hayward [EMAIL PROTECTED]
Mote Marine Laboratory  Office: 941.388.4441  Cell: 941.302.4982
1600 Ken Thompson Parkway   Fax: 941.388.4312
Sarasota, FL 34236  See: http://www.mote.org
Independent, non-profit, marine and estuarine research and education facility.
For PGP public key do: http://www.mote.org/~don/donpgp.asc
use "DISCLAIMER"; # We run Debian Linux
Taxes feed the starving and clothe the naked.




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



[Samba] SID of windows an issue with samba??

2003-07-17 Thread stefan sokoll
hi all
 
windows uses a SID to have an unique identifier for a machine - does winbind map this 
ID, too or is this id ignored with samba?
 
I'm asking because i like to image my machine that runs with samba3 within a ads 
managed domain and will copy it on other machines that shall be added to the domain, 
too.
is it ok to simply change the hostname of the other machines and adding them into the 
ads later?
 
thanks stefan



-
Gesendet von http://mail.yahoo.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] sid->username conversion on beta2 as a domain member in asamba domain?

2003-07-07 Thread Buchan Milne
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

We run a samba-2.2.x+LDAP domain, and I have been experimenting with
samba3 as a member server on one of our production servers (when it has
no open connections). I also have samba-2.2.x on it, which works fine.

However, beta2 seems to not resolve sids to usernames, so the security
tab in the file properties dialog from a windows box shows the sid, and
not the username. 2.2.x shows the username. Since we use ACLs quite a
bit, this is enough to prevent me running beta2 full-time, I haven't
even tested if file permissions/ACLs work on beta2 for user-based access
controls.

Anyone else seen this?

I can provide logs if necessary, but can't spend the time now to
investigate (maybe tomorrow).

Regards,
Buchan
- --
|--Another happy Mandrake Club member--|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/CctMrJK6UGDSBKcRAnYHAJ9bLdXz1bjbexzKbNN9V0p9tLTt6QCfR9YV
DVMvrqkDelgVCrvkXHdzR3A=
=rpTd
-END PGP SIGNATURE-

**
Please click on http://www.cae.co.za/disclaimer.htm to read our
e-mail disclaimer or send an e-mail to [EMAIL PROTECTED] for a copy.
**
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba