[Samba] create_canon_ace_lists: unable to map SID

[Mac]

Jerry wrote:-

>
>Mac wrote:
>
>| [2004/04/23 10:22:32, 0] smbd/posix_acls.c:create_canon_ace_lists(1380)
>|   create_canon_ace_lists: unable to map SID
>|   S-1-5-21-973294077-3660535-3933214913-1177 to uid or gid.
>
>Sounds like bug 1139 which was fixed in 3.0.3rc1.
>


Err. nope.

Have just downloaded 3.0.3rc1 and compiled.

Same problem.



Could some kind soul please explain just what _should_ happen here and
how.

I'm guessing that the XP Pro client has supplied a SID for some purpose
and Samba is trying to match that to UNIX credentials.

Clearly this can't work, _ever_, because the Samba server doesn't know
anything about SIDs, especially not this one as it was generated by the
AD domain controller when the user (jsmith) was created.

How do I tell Samba what the SID is for any particular username?

Should I use 'idmap'?  (and pre-populate it from the AD?)



                               Mac
          Assistant Systems Adminstrator @nibsc.ac.uk
                        dmccann at nibsc.ac.uk
   Work: +44 1707 641565          Everything else: +44 7956 237670 (anytime)