[Samba] Samba classicupgrade problem

[Koenraad Lelong]

Hi,

I'm practising to do a classicupgrade of my samba3 domain.

When I run the upgrade, I get this error :

unpack_nt_owners: owner sid mapped to uid 0
idmapping sid_to_xid failed for id[0]=S-1-5-32-544: NT_STATUS_NONE_MAPPED
unpack_nt_owners: unable to validate group sid.
set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER.
ERROR(runtime): uncaught exception - (-1073741734, 
'NT_STATUS_INVALID_OWNER')
   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", 
line 175, in _run
     return self.run(*args, **kwargs)
   File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line 
1318, in run
     useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
   File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 932, 
in upgrade_from_samba3
     result.names.domaindn, result.lp, use_ntvfs)
   File "/usr/lib/python2.7/dist-packages/samba/provision/__init__.py", 
line 1562, in setsysvolacl
     setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid), 
use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=s4_passdb)
   File "/usr/lib/python2.7/dist-packages/samba/ntacls.py", line 154, in 
setntacl
     smbd.set_nt_acl(file, security.SECINFO_OWNER | 
security.SECINFO_GROUP | security.SECINFO_DACL | security.SECINFO_SACL, sd)

Since I already had a good practice-classicupgrade, I compared my 
"logfile". The difference I see is early on, for the bad one :
Provisioning
Exporting account policy
Exporting groups
Exporting users
...

While the "good" had this :
Provisioning
Exporting account policy
Exporting groups
Ignoring group 'ace-personeel' 
S-1-5-21-177555115-702490737-1861429907-1120 listed but then not found: 
Unable to enumerate group members, (-1073741722,No such group)
Ignoring group 'Studenten' S-1-5-21-177555115-702490737-1861429907-1003 
listed but then not found: Unable to enumerate group members, 
(-1073741722,No such group)
Ignoring group 'dotsysgroep' 
S-1-5-21-177555115-702490737-1861429907-1136 listed but then not found: 
Unable to enumerate group members, (-1073741722,No such group)
Ignoring group 'Machines' S-1-5-21-177555115-702490737-1861429907-1059 
listed but then not found: Unable to enumerate group members, 
(-1073741722,No such group)
Ignoring group 'Domain Guests' 
S-1-5-21-177555115-702490737-1861429907-514 listed but then not found: 
Unable to enumerate group members, (-1073741722,No such group)
Ignoring group 'RDP' S-1-5-21-177555115-702490737-1861429907-3264 listed 
but then not found: Unable to enumerate group members, (-1073741722,No 
such group)
Ignoring group 'NDA' S-1-5-21-177555115-702490737-1861429907-3263 listed 
but then not found: Unable to enumerate group members, (-1073741722,No 
such group)
Ignoring group 'isoadmin' S-1-5-21-177555115-702490737-1861429907-3265 
listed but then not found: Unable to enumerate group members, 
(-1073741722,No such group)
Ignoring group 'testers' S-1-5-21-177555115-702490737-1861429907-3015 
listed but then not found: Unable to enumerate group members, 
(-1073741722,No such group)
Ignoring group 'surfers' S-1-5-21-177555115-702490737-1861429907-3017 
listed but then not found: Unable to enumerate group members, 
(-1073741722,No such group)
...

The good one does export my groups, the bad one skips this for some 
reason. The files passwd and group are in the same directory as all tdb 
files.

What am I missing ?

P.S. Is there on "official" way to have a log to see what the 
classicupgrade does ? Now I ssh'd into the machine and I copied the 
screen-content.

Kind regards,

Koenraad Lelong