SID, Win2k SP2 and profiles

[Michael Collin Nielsen]

Hi

Have seen some reports of peolpe having problems with profiles on win2k
with SP2 and I have seen some people describing problems resolving SIDs. 

I have just upgraded some of our workstations to SP2 and now people cannot
read their profiles when logging on to the workstations. 

In the log I see:

[2001/08/14 15:52:43, 0] smbd/posix_acls.c:create_canon_ace_lists(747)
  create_canon_ace_lists: unable to map SID
S-1-5-21-134565758-1429694315-1675519318-9090 to uid or gid.
[2001/08/14 15:53:13, 0] smbd/open.c:open_directory(1047)
  open_directory: unable to create michael.pds/Menuen
Start/Programmer/Tilbeh<9B>r/Underholdning. Error was No such file or
directory
[2001/08/14 15:53:13, 0] smbd/open.c:open_directory(1047)
  open_directory: unable to create michael.pds/Foretrukne/Medier. Error
was No such file or directory
[2001/08/14 15:53:14, 0] smbd/open.c:open_directory(1047)
  open_directory: unable to create michael.pds/Dokumenter/Billeder. Error
was No such file or directory
[2001/08/14 15:53:14, 0] smbd/open.c:open_directory(1047)
  open_directory: unable to create michael.pds/Application
Data/Microsoft/SystemCertificates/My/CTLs. Error was No such file or
directory
[2001/08/14 15:53:16, 0] smbd/open.c:open_directory(1047)
  open_directory: unable to create michael.pds/Application
Data/Microsoft/Internet Explorer/Quick Launch. Error was No such file or
directory
[2001/08/14 15:53:16, 0] smbd/open.c:open_directory(1047)
  open_directory: unable to create michael.pds/Application
Data/Identities/{70E14BC0-FE2D-4718-8C27-C49F7670B0C1}. Error was No such
file or directory

which seems strange as the directories all are there and readable by the
user logging on. Therefore I find it easy to blame the first line stating
that samba cannot map the SID. 

I can't find any solution to this problem in the mailinglists nor in cvs
comments although I can see that some people have had similar problems.

I'm running 2.2.1a on Solaris in a production environment, so I would
really appreciate is someone could give me a hint. (Im' have security =
domain, password server = * and a win2k server running as DC.)

If you need more info I can set up a test-server and give you more debug
info, but I cannot debug on my production server.

Regards

-Mcihael

-- 
   Michael Collin Nielsen  mailto:michael at hum.auc.dk
   M.Sc.E.E.               http://www.hum.auc.dk/~michael
   Sysadm in Faculty of Humanities, Aalborg University