Problems resolving a Master domain SID from a Resource domain

Gustavo Vegas gustavo at colltech.com
Tue Jun 26 19:54:13 GMT 2001


I am having a problem with the resolution of an SID between a Master
domain and a Resource domain. I have a resource domain, which the samba
server belongs to, and a master domain which provides the
authentication. When I try to log in to a terminal server (Citrix) in the
resource domain, and the login process runs a script, I get the following
messages in the log file for the connection:
"
[2001/06/25 18:31:22, 2] libsmb/namequery.c:name_query(408)
  Got a positive name query response from 216.13.10.3 ( 172.16.6.32 
223.200.20.5 1 163.11.12.1 223.200.20.50 172.16.6.32 )
[2001/06/25 18:31:35, 2] libsmb/namequery.c:name_query(408)
  Got a positive name query response from 216.13.10.3 ( 163.11.12.1 )
[2001/06/25 18:31:40, 1] smbd/service.c:make_connection(623)
  az34mts01 (172.16.7.31) connect to service gvegas as user gvegas 
(uid=10062, gid=10200) (pid 13858)
[2001/06/25 18:31:41, 0] smbd/posix_acls.c:create_canon_ace_lists(747) create_canon_ace_lists: unable to map SID
S-1-5-21-2055828564-121983361-110664 3521-78345 to uid or gid.
[2001/06/25 18:33:58, 0] smbd/posix_acls.c:create_canon_ace_lists(747)
  create_canon_ace_lists: unable to map SID S-1-5-21-2055828564-121983361-110664
3521-78345 to uid or gid.
"

The SID mentioned in the log file equates to the one that resolves in the
Master domain. I am also using a username map, since the accounts in the
NT world do not match those in the Unix side of things. Does anybody have
any clues on this problem?

Thanks,
-- 
===========================================+===========================
 **** ***** Gustavo Vegas             Gustavo_Vegas at colltech.com
**      *   
**      *   Collective Technologies
 ****   *       
===========================================+===========================
God is real, unless declared integer.
===========================================+===========================







More information about the samba-technical mailing list