[Samba] Samba 3.0.0rc1 and 2 servers - PDC and homes

[Buchan Milne]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> Message: 15
> Date: Sun, 17 Aug 2003 19:03:39 -0500
> From: Marlys Nelson <Marlys.A.Nelson at uwrf.edu>
> Subject: [Samba] Samba 3.0.0rc1 and 2 servers - PDC and homes
> To: samba at lists.samba.org
> Message-ID: <3F4017DB.4060707 at uwrf.edu>
> Content-Type: text/plain; charset=us-ascii; format=flowed
>
> I have Samba 3.0.0rc1 installed on a linux server DC-01 and it's
configured as
> a PDC. The only share it has is netlogon. Users are stored in an LDAP
passdb.
>
> All our users' home directories are on a second linux server, FS-01.
It's
> been joined to the domain (command "sudo net join -U Administrator",
which is
> the name of the "root" account).  And here's a snippet from it's smb.conf:
>

[..]

>
> If I logon to the domain from an XP machine and pull up the
> properties|security on one of my files, it shows the following in the
"Group
> or user names" box:
>    * Group icon for Everyone
>    * User? icon with a SID listed
>    * Group icon with the name of my group listed
>
> Why do I get the User? icon with the SID showing?  The SID appears to
be the
> localsid for FS-01 (where the homes share is located).
>
>  From FS-01:
>    bash-2.05$ sudo net getlocalsid CAMPUS
>    SID for domain CAMPUS is: S-1-5-21-1347140671-2256076281-2964443892
>    bash-2.05$ sudo net getlocalsid
>    SID for domain FS-01 is: S-1-5-21-3124996394-1784840607-3979961563
>
> The User? SID is S-1-5-21-3124996394-1784840607-3979961563-10808
>
> I was expecting the User icon with my login name since this is
supposed to be
> a single domain with single users/groups.  If I look at a file on
> \\DC-01\netlogon, I see my name and group.  Is there some step I've
missed in
> setting up the homes server?
>

This looks exactly like what I am seeing with a samba-3.0.0rc1 member in
a samba-2.2.8a domain, and seems to be this bug:

https://bugzilla.samba.org/show_bug.cgi?id=245

With samba-2.2.x (instead of 3.0.0rc1) on the (same) member server, the
SID is resolved correctly, and Win2ksp3 shows the username/gecos correctly.

Jerry asked for level 10 logs for this, I will be sending him some
shortly ...

Regards,
Buchan

- --
|--------------Another happy Mandrake Club member--------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/QSCYrJK6UGDSBKcRAmpeAJ9DNAuyVK5YnF7qiS4G9c+njiXofACgqkyB
B3AzgS7VI/y1FkwL/pCnZvg=
=NJzk
-----END PGP SIGNATURE-----

******************************************************************
Please click on http://www.cae.co.za/disclaimer.htm to read our
e-mail disclaimer or send an e-mail to info at cae.co.za for a copy.
******************************************************************