SID list population in 3.5.n series

Jeremy Allison jra at
Fri Mar 9 18:10:17 MST 2012

On Fri, Mar 09, 2012 at 03:01:57PM -0800, Richard Sharpe wrote:
> On Fri, Mar 9, 2012 at 10:44 AM, Tom Noonan II <thomas.noonan.ii at> wrote:
> > Can someone familar with the 3.5.n series help me find where the list of SIDs
> > in the NT_USER_TOKEN struct is populated when a connection is opened?  I'm
> > having a heck of a time finding it on my own.
> >
> > In case there are multiple code paths, I'm interested in SID population from
> > the glibc name service calls (I believe getgrouplist() in lib/system_smbd.c but
> > I may be mistaken) and SID population for ADS domain users.
> If you push the debug level up to 10 you will see where it is happening.
> What specific problem are you trying to overcome?
> There are multiple code paths, by the way, and an anon login is
> inferior to a normal login.

Richard is correct that a debug level 10 will help here.

It can also depend on whether winbindd is running. Can
you give us more information, or feel free to contact
Richard and I privately if that's easier.


More information about the samba-technical mailing list