Problem with lookup_name

Patrick Reid p.j.reid at earthling.net
Thu Nov 1 20:04:04 GMT 2001


OK, I have one other piece of information.

I accidentally found that [machinesid]-500 gives something other than
"CANDESCO\ (8)". That SID gives "CANDESCO\Administrator (1)" A search of all
numbers between 0 and 5000 gives only one other value which does not return
"CANDESCO\ (8)". This is 501, which yields "CANDESCO\ (1)"

Anyone have any suggestions?

Patrick

-----Original Message-----
From: samba-admin at lists.samba.org [mailto:samba-admin at lists.samba.org]On
Behalf Of Patrick Reid
Sent: November 1, 2001 9:50 AM
To: samba at lists.samba.org
Subject: RE: Problem with lookup_name


I have not been able to get any help on this issue. I am running Samba 2.2.2
on RedHat 7.1 with the kernel upgraded to 2.4.10 and patched to allow pppoe
and pptp vpn access.

In my first e-mail on this problem I mentioned that using lookupnames in
rpcclient gives me only "S-0-0 (8)" for any user name and lookupsids gives
me only "CANDESCO\ (8)" (n.b. CANDESCO is my domain name)

And as below, when trying to set permissions on a Win2K machine using a
domain user who has never logged on to the machine in question, Windows says
"Unable to lookup user names for display" after I have selected the user
from the list of domain users. You can see a snippet of debug=10 log which
seems to id the problem to some degree.

I have confirmed that my smbpasswd file has all of the correct unix UIDs for
each samba user and machine user. Logons work. Browsing is fine. I can even
change permissions for a domain user as long as s/he has already logged on
to the Win2K machine in question.

Please, please please can someone help me with this?  I am finding this
really frustrating and have no idea how to fix it. Should I post more
information? If so, what?

Patrick Reid

-----Original Message-----
From: samba-admin at lists.samba.org [mailto:samba-admin at lists.samba.org]On
Behalf Of Patrick Reid
Sent: October 16, 2001 11:29 AM
To: samba at lists.samba.org
Subject: Problem with lookup_name


I am running samba 2.2.2 on Redhat 7.1 as a PDC

I posted about this problem a while back and never got any repsonse, but I
have done a bit more investigating and I hope that someone can help me fix
this.

The situation is this: I need to be able to assign permissions to files or
directories on the win2k machines on my network using the domain user names
from Samba. If I try to do so for a domain user who has never logged on to
the machine in question, Win2k comes back with the error:

Unable to lookup user names for display

I set my debug to 10 and tried to do this again, setting permissions on a
directory for a user whose user name is devens and has never logged on to
the machine from which I am trying to define the permissions. Of course,
there are reams of stuff in the logs, but the relevant entries seem to be
the following:

[2001/10/16 10:54:34, 10] lib/util_sid.c:split_domain_name(336)
  split_domain_name:name 'devens' split into domain :'OFFICESERVER' and user
:'devens'
[2001/10/16 10:54:34, 5] rpc_server/srv_lsa_nt.c:init_lsa_rid2s(136)
  init_lsa_rid2s: looking up name devens
[2001/10/16 10:54:34, 10] smbd/uid.c:lookup_name(287)
  lookup_name: winbind lookup for devens failed - trying local
[2001/10/16 10:54:34, 10] smbd/uid.c:lookup_name(321)
  lookup name: (local) devens failed.

I note that Samba seems to be trying to use winbind -- my Samba is the PDC
and there is no external NT machine to do a lookup against; can I turn this
off somehow? The real nub of the matter is that local lookup appears to also
fail, even though "getent passwd devens" returns user name, group, full
name, etc.

How can I fix thngs so that Samba performs username lookup on my passwd
database properly?

Patrick Reid


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba






More information about the samba mailing list