[Samba] Samba 2.2.6pre2 doesn't try to lookup for user user name by SID +pdbedit

[Dan Ohnesorg]

On Fri, 20 Sep 2002, Andrew Bartlett wrote:

> Real group support is really only in TNG and HEAD.  We are currently
> doing work to bring HEAD's support up to scratch, but 2.2 has next to
> nothing.

In version ~2.2.2 with smbpasswd backend I have seen groups defined in 
/etc/groups, but now I am not seeing anything.

I have also paralel TNG samba from CVS for testing. But there are many 
problem, for example it is not seen on network and cannot register to 
samba acting as wins server. But it is true, that I can view some 
properties of users using user manager for domains.

> > - if I try to open a user in user manager for domains, the samba hit into
> > LDAP by RID and gets relevant info. I see in log, that the parameters are
> > filled from LDAP in init_ldap_from_sam to right places, but the client
> > says, that is was not able to find user in domain.

Its not true, that there aren't relevant entries in log, now I have found, 
that I get this error

[2002/09/19 15:42:25, 3] smbd/process.c:process_smb(878)
  Transaction 171 of length 79
[2002/09/19 15:42:25, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans2 (pid 32721)
[2002/09/19 15:42:25, 3] smbd/error.c:error_packet(106)
  error packet at smbd/trans2.c(3219) cmd=50 (SMBtrans2) 
NT_STATUS_NETWORK_ACCESS_DENIED
[2002/09/19 15:42:25, 3] smbd/process.c:process_smb(878)
  Transaction 172 of length 79
[2002/09/19 15:42:25, 3] smbd/process.c:switch_message(685)
  switch message SMBtrans2 (pid 32721)
[2002/09/19 15:42:25, 3] smbd/error.c:error_packet(106)
  error packet at smbd/trans2.c(3219) cmd=50 (SMBtrans2) 
NT_STATUS_NETWORK_ACCESS_DENIED

There are many error of this kind, while getting user accounts and while 
working with printers.

> > 
> > - the pdbedit tool is very useful, but it should also fill in the
> > displayName field, while importing smbpasswd. With smbpasswd backend is
> > displayed Full name from /etc/passwd, with LDAP is the field after import
> > empty and the names aren't shown.
> 
> pdbedit is much improved in 3.0 - and the import functionality
> compleatly replaced.  You might want to give that a go.

But there is not used objectClass: account and I was not able backport the 
change from 2.2.6r2 to 3.0, I have also replaced one function in the .c 
file, but the pdbedit didn't compile anymore.



cheers
dan