[Samba] Re: Samba PDC migration

[Tim Allen]

Andrew

> Samba does not send back 'null' strings easily - if the passdb comes up
> with 'null' it uses the default.  Perhaps by setting 'logon path' etc to
> "" it might help.  Or it might not.

OK, tried this but unfortunately it does not fix the problem.

The user who is logging in has a UID of 1002

Looking at the logs, Samba authenticates the user OK, but then we see that
his RID is set to 3004, not 1002. From then on, it's a new user. I assume
this new RID is coming from the NT4 workstation? The question is, what's
making it do this? What sort of negotiation takes place between Samba and
the workstation at this point?.

Tim Allen


[2002/07/21 09:36:28, 3] smbd/password.c:authorise_login(735)
  authorise_login: ACCEPTED: validated uid ok as non-guest (user=tda)
[2002/07/21 09:36:28, 3] smbd/service.c:make_connection(491)
  Connect path is /usr/local/samba/netlogon
[2002/07/21 09:36:28, 3] smbd/sec_ctx.c:push_sec_ctx(281)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2002/07/21 09:36:28, 3] smbd/uid.c:push_conn_ctx(285)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2002/07/21 09:36:28, 3] smbd/sec_ctx.c:set_sec_ctx(313)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2002/07/21 09:36:28, 3] smbd/sec_ctx.c:get_current_groups(162)
  get_current_groups: user is in 4 groups: 1002, 100, 501, 502
[2002/07/21 09:36:28, 3] smbd/sec_ctx.c:pop_sec_ctx(420)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2002/07/21 09:36:28, 3] smbd/sec_ctx.c:get_current_groups(162)
  get_current_groups: user is in 4 groups: 1002, 100, 501, 502
[2002/07/21 09:36:28, 3] lib/util_seaccess.c:se_access_check(269)
  se_access_check: user sid is
S-1-5-21-1234567890-1234567890-1234567890-3004
[2002/07/21 09:36:28, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-5-21-1234567890-1234567890-1234567890-3005
[2002/07/21 09:36:28, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-5-21-1234567890-1234567890-1234567890-1201
[2002/07/21 09:36:28, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-5-21-1234567890-1234567890-1234567890-2003
[2002/07/21 09:36:28, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-5-21-1234567890-1234567890-1234567890-2005
[2002/07/21 09:36:28, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-1-0
[2002/07/21 09:36:28, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-5-2
[2002/07/21 09:36:28, 3] lib/util_seaccess.c:se_access_check(272)
  se_access_check: also S-1-5-11
[2002/07/21 09:36:28, 3] smbd/vfs.c:vfs_init_default(122)
  Initialising default vfs hooks
[2002/07/21 09:36:28, 3] smbd/sec_ctx.c:set_sec_ctx(313)
  setting sec ctx (1002, 1002) - sec_ctx_stack_ndx = 0
[2002/07/21 09:36:28, 3] smbd/sec_ctx.c:set_sec_ctx(319)
  4 user groups:
  1002 100 501 502