Skipped groups in idmap2 on a cluster (with CTDB and GPFS)

Richard Sharpe realrichardsharpe at
Fri May 27 10:03:06 MDT 2011

On Thu, May 26, 2011 at 9:22 AM, Volker Lendecke
<Volker.Lendecke at> wrote:
> On Thu, May 26, 2011 at 09:06:15AM -0700, Richard Sharpe wrote:
>> > It should never happen that the idmap2.tdb is different on
>> > different nodes. That file is being covered by ctdb
>> > transactions, which are supposed to take care of making sure
>> > that they are the same everywhere. Can you say when this
>> > happened?
>> It happened on a customer site on 18-May-2011 or there abouts.
>> The customer was using robocopy to copy a share from a Win2k8 (I
>> think) node to the cluster.
>> There are two issues that I see:
>> 1. The idmap2 files are different on the nodes on the cluster
>> 2. The partial SID mapping info, but even worse is that it is the
>> GID-to-SID entry and it is partial as well.
> There must have been transaction problems. With recent
> versions of ctdb and Samba we believe they are gone. Is it
> possible that you have messages containing "rsn" errors in
> /var/log/messages around that time or later? I don't recall
> the exact messages.

Since these were in the persistent TDBs, would we expect to see errors
about RSNs? I see lots of errors about access denied trying to connect
to ctdb but no error messages about RSNs.

Richard Sharpe

More information about the samba-technical mailing list