[Samba] create_canon_ace_lists: unable to map SID

Mac mac at nibsc.ac.uk
Tue Apr 27 12:18:11 GMT 2004

Jerry wrote:-

>Mac wrote:
>| [2004/04/23 10:22:32, 0] smbd/posix_acls.c:create_canon_ace_lists(1380)
>|   create_canon_ace_lists: unable to map SID
>|   S-1-5-21-973294077-3660535-3933214913-1177 to uid or gid.
>Sounds like bug 1139 which was fixed in 3.0.3rc1.

Err. nope.

Have just downloaded 3.0.3rc1 and compiled.

Same problem.

Could some kind soul please explain just what _should_ happen here and

I'm guessing that the XP Pro client has supplied a SID for some purpose
and Samba is trying to match that to UNIX credentials.

Clearly this can't work, _ever_, because the Samba server doesn't know
anything about SIDs, especially not this one as it was generated by the
AD domain controller when the user (jsmith) was created.

How do I tell Samba what the SID is for any particular username?

Should I use 'idmap'?  (and pre-populate it from the AD?)

          Assistant Systems Adminstrator @nibsc.ac.uk
                        dmccann at nibsc.ac.uk
   Work: +44 1707 641565          Everything else: +44 7956 237670 (anytime)

More information about the samba mailing list