[Samba] Samba 3.0.0beta3: Problem looking up SID of root

John H Terpstra jht at samba.org
Fri Jul 25 04:57:03 GMT 2003

On Fri, 18 Jul 2003, Paul Eggleton wrote:

> Hi all,
> I have just installed Samba 3.0.0 beta 3 on RH9, after uninstalling beta
> 2 (but keeping the smb.conf file the same). I am having a problem with
> resolving the SID of root. I have "admin users = Administrator" set on
> the single share I have set up so that Administrator performs as root.

That should be "admin users = root" You can map the NT user
"Administrator" to root in your smbusers file.

Set in smb.conf [globals], username map = /etc/samba/smbusers

In smbusers put:

	root = Administrator

> Looking at a directory created in the share by Administrator on the
> Windows client, which on the Samba server is owned by root, Windows
> reports that it has an owner of the following unresolved SID:
> S-1-5-21-2120923204-611296470-4252591782-1000
> Using wbinfo on the Samba server:
> [root at beaker root]# wbinfo -S
> S-1-5-21-2120923204-611296470-4252591782-1000
> 10001
> [root at beaker root]# wbinfo -s
> S-1-5-21-2120923204-611296470-4252591782-1000
> Could not lookup sid S-1-5-21-2120923204-611296470-4252591782-1000

You should check the root SID by:

	pdbedit -Lv root

If you then do:

	wbinfo -s 'root-sid'

This should correctly resolve. If not, then you have a config file
problem. Send it to me and I'll get back to you.

- John T.

> If I run "getent passwd" there are lots of winbind-mapped entries, but
> none for uid 10001. So it seems that it is the uid mapping for root is
> broken in 3.0.0 beta 3, unless I have somehow made a mistake in the
> upgrade. I am positive this was working fine with my beta 2 installation
> - I could look at a folder on the share from Windows and it would
> display MACHINENAME\root, not an unresolved SID. I have tried deleting
> the winbind idmap tdb file but it doesn't help the situation.
> Cheers,
> Paul
> ---------------------------------------------------------
> Paul Eggleton                  Ph:    +64-9-4154790
> Software Developer             Fax:   +64-9-4154791
> CJN Technologies Ltd.          DDI:   +64-9-4154795
> http://www.cjntech.co.nz       Email: paule at cjntech.co.nz
> ---------------------------------------------------------
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

John H Terpstra
Email: jht at samba.org

More information about the samba mailing list