[Samba-it] Domain member gentent

Wed Dec 18 17:38:46 UTC 2019

Il 18/12/2019 14:07, Marco Gaiarin ha scritto:
> Mandi! Giuseppe Arvati
>    In chel di` si favelave...
>
>>> scusa NSS/winbind funziona?
>> Secondo me sì perchè se uso getent si attiva winbind
> Eh, invece a me pare proprio di no... sicuro di aver installato
> correttamente libnss-winbind?


inoltre

  * sid2name OK
  * sid2uid KO

[root at dm1piopp var]# wbinfo -s 
S-1-5-21-1853045328-2428526881-2616184179-1118
APAM-AD\garvati 1
[root at dm1piopp var]# wbinfo -S 
S-1-5-21-1853045328-2428526881-2616184179-1118
failed to call wbcSidToUid: WBC_ERR_DOMAIN_NOT_FOUND
Could not convert sid S-1-5-21-1853045328-2428526881-2616184179-1118 to uid


ho messo il log a 10 e facendo getent passwd "APAM-AD\garvati"

  Finished processing child request 56
[2019/12/18 18:14:10.213031,  4] 
../source3/winbindd/winbindd_dual.c:1562(child_handler)
   child daemon request 56
[2019/12/18 18:14:10.213147,  3] 
../source3/winbindd/winbindd_samr.c:595(sam_name_to_sid)
   sam_name_to_sid
[2019/12/18 18:14:10.213178,  3] 
../source3/winbindd/winbindd_rpc.c:272(rpc_name_to_sid)
   name_to_sid: GARVATI for domain
[2019/12/18 18:14:10.213221,  5] 
../source3/rpc_server/lsa/srv_lsa_nt.c:163(lookup_lsa_rids)
   lookup_lsa_rids: looking up name GARVATI
[2019/12/18 18:14:10.213250,  5] 
../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam)
   pdb_getsampwnam (TDB): error fetching database.
    Key: USER_garvati
[2019/12/18 18:14:10.213269,  5] 
../source3/lib/username.c:181(Get_Pwnam_alloc)
   Finding user GARVATI
[2019/12/18 18:14:10.213276,  5] 
../source3/lib/username.c:120(Get_Pwnam_internals)
   Trying _Get_Pwnam(), username as lowercase is garvati
[2019/12/18 18:14:10.213923,  5] 
../source3/lib/username.c:128(Get_Pwnam_internals)
   Trying _Get_Pwnam(), username as given is GARVATI
[2019/12/18 18:14:10.214303,  5] 
../source3/lib/username.c:153(Get_Pwnam_internals)
   Checking combinations of 0 uppercase letters in garvati
[2019/12/18 18:14:10.214319,  5] 
../source3/lib/username.c:159(Get_Pwnam_internals)
   Get_Pwnam_internals didn't find user [GARVATI]!
[2019/12/18 18:14:10.214650,  5] 
../source3/rpc_server/lsa/srv_lsa_nt.c:181(lookup_lsa_rids)
   init_lsa_rids: GARVATI not found
[2019/12/18 18:14:10.214687,  2] 
../source3/winbindd/winbindd_rpc.c:291(rpc_name_to_sid)
   name_to_sid: failed to lookup name: NT_STATUS_NONE_MAPPED
[2019/12/18 18:14:10.214731,  4] 
../source3/rpc_server/rpc_ncacn_np.c:220(make_internal_rpc_pipe_p)
   Create pipe requested samr
[2019/12/18 18:14:10.214781,  4] 
../source3/rpc_server/rpc_ncacn_np.c:260(make_internal_rpc_pipe_p)
   Created internal pipe samr
[2019/12/18 18:14:10.214802,  5] 
../source3/rpc_server/samr/srv_samr_nt.c:3860(_samr_Connect2)
   _samr_Connect2: 3860
[2019/12/18 18:14:10.214816,  4] 
../source3/rpc_server/srv_access_check.c:95(access_check_object)
   _samr_Connect2: ACCESS should be DENIED  (requested: 0x000f003f)
   but overritten by euid == initial uid
[2019/12/18 18:14:10.214825,  4] 
../source3/rpc_server/srv_access_check.c:117(access_check_object)
   _samr_Connect2: access GRANTED (requested: 0x000f003f, granted: 
0x000f003f)
[2019/12/18 18:14:10.214835,  5] 
../source3/rpc_server/samr/srv_samr_nt.c:3889(_samr_Connect2)
   _samr_Connect2: 3889
[2019/12/18 18:14:10.214863,  4] 
../source3/rpc_server/srv_access_check.c:84(access_check_object)
   access_check_object: user rights access mask [0x3f0]
[2019/12/18 18:14:10.214871,  4] 
../source3/rpc_server/srv_access_check.c:95(access_check_object)
   _samr_OpenDomain: ACCESS should be DENIED  (requested: 0x000f040f)
   but overritten by euid == initial uid
[2019/12/18 18:14:10.214880,  4] 
../source3/rpc_server/srv_access_check.c:117(access_check_object)
   _samr_OpenDomain: access GRANTED (requested: 0x000f040f, granted: 
0x000f07ff)
[2019/12/18 18:14:10.214891,  5] 
../source3/rpc_server/samr/srv_samr_nt.c:501(_samr_OpenDomain)
   _samr_OpenDomain: 501
[2019/12/18 18:14:10.214912,  4] 
../source3/rpc_server/rpc_ncacn_np.c:220(make_internal_rpc_pipe_p)
   Create pipe requested lsarpc
[2019/12/18 18:14:10.214940,  4] 
../source3/rpc_server/rpc_ncacn_np.c:260(make_internal_rpc_pipe_p)
   Created internal pipe lsarpc
[2019/12/18 18:14:10.214962,  4] 
../source3/rpc_server/srv_access_check.c:95(access_check_object)
   _lsa_OpenPolicy2: ACCESS should be DENIED  (requested: 0x000f1fff)
   but overritten by euid == initial uid
[2019/12/18 18:14:10.214977,  4] 
../source3/rpc_server/srv_access_check.c:117(access_check_object)
   _lsa_OpenPolicy2: access GRANTED (requested: 0x000f1fff, granted: 
0x000f1fff)
[2019/12/18 18:14:10.214996,  3] 
../source3/winbindd/winbindd_rpc.c:272(rpc_name_to_sid)
   name_to_sid: GARVATI for domain
[2019/12/18 18:14:10.215017,  5] 
../source3/rpc_server/lsa/srv_lsa_nt.c:163(lookup_lsa_rids)
   lookup_lsa_rids: looking up name GARVATI
[2019/12/18 18:14:10.215042,  5] 
../source3/passdb/pdb_tdb.c:600(tdbsam_getsampwnam)
   pdb_getsampwnam (TDB): error fetching database.
    Key: USER_garvati
[2019/12/18 18:14:10.215059,  5] 
../source3/lib/username.c:181(Get_Pwnam_alloc)
   Finding user GARVATI
[2019/12/18 18:14:10.215066,  5] 
../source3/lib/username.c:120(Get_Pwnam_internals)
   Trying _Get_Pwnam(), username as lowercase is garvati
[2019/12/18 18:14:10.215389,  5] 
../source3/lib/username.c:128(Get_Pwnam_internals)
   Trying _Get_Pwnam(), username as given is GARVATI
[2019/12/18 18:14:10.215723,  5] 
../source3/lib/username.c:153(Get_Pwnam_internals)
   Checking combinations of 0 uppercase letters in garvati
[2019/12/18 18:14:10.215732,  5] 
../source3/lib/username.c:159(Get_Pwnam_internals)
   Get_Pwnam_internals didn't find user [GARVATI]!
[2019/12/18 18:14:10.216056,  5] 
../source3/rpc_server/lsa/srv_lsa_nt.c:181(lookup_lsa_rids)
   init_lsa_rids: GARVATI not found
[2019/12/18 18:14:10.216079,  2] 
../source3/winbindd/winbindd_rpc.c:291(rpc_name_to_sid)
   name_to_sid: failed to lookup name: NT_STATUS_NONE_MAPPED
[2019/12/18 18:14:10.217275,  4] 
../source3/winbindd/winbindd_dual.c:1570(child_handler)
   Finished processing child request 56