[Samba] primary gid of user [desires] is not a Domain group !

[C.Lee Taylor]

Wendell Wilson wrote:

> Precisely the same thing is happening to me! There have been a couple 
> other threads with others having more or less the same problem... but 
> I haven't seen any fixes that work for me, yet.
>
> I have 3.0.1, at the moment. Did you upgrade from 2.2.x? or from an 
> earlier version of 3.x? Or did this just start out of the blue? I am 
> not using LDAP, at this point, or even winbind to handle user/group 
> mappings. What sort of setup do you have?

    Currently using 3.0.2, at least the ones FC1 just shiped over the 
weekend ...

    I did a clean installation and converted my LDAP ldif file to from 
Samba2 to Samba3 ... I have made all sorts of changes and can't get this 
to go away, so I don't know what the problem is ...

    At first I through that my posix accounts primary gid how to be 
mapped to an NT one, then I modified the Primary SID for each users and 
still got it ... so I really don't know ...


Mailed
Lee

>
> Wendell
>
> C.Lee Taylor wrote:
>
>> Greetings ...
>>
>>    I hope somebody can explain this to me, or give me a help to fix 
>> this problem ...
>>
>>    On my Samba server ( 3.0.2rc2 ) I am getting ...
>>
>> Feb  9 17:31:21 eastrand smbd[2113]: [2004/02/09 17:31:21, 0] 
>> rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
>> Feb  9 17:31:21 eastrand smbd[2113]:   failed to decode PDU
>> Feb  9 17:31:21 eastrand smbd[2113]: [2004/02/09 17:31:21, 0] 
>> rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
>> Feb  9 17:31:21 eastrand smbd[2113]:   process_request_pdu: failed to 
>> do schannel processing.
>> Feb  9 17:31:26 eastrand smbd[2113]: [2004/02/09 17:31:26, 0] 
>> rpc_server/srv_util.c:get_domain_user_groups(372)
>> Feb  9 17:31:26 eastrand smbd[2113]:   get_domain_user_groups: 
>> primary gid of user [desires] is not a Domain group !
>> Feb  9 17:31:26 eastrand smbd[2113]:   get_domain_user_groups: You 
>> should fix it, NT doesn't like that
>>
>>    But if I do ...
>>
>> [root at eastrand root]# pdbedit -L -v -u desires
>> Unix username:        desires
>> NT username:          desires
>> Account Flags:        [UX         ]
>> User SID:             S-1-5-21-3795178988-3942151060-2329322268-44008
>> Primary Group SID:    S-1-5-21-3795178988-3942151060-2329322268-513
>> Full Name:            Desire Steyn
>> Home Directory:       \\eastrand\desires
>> HomeDir Drive:        l:
>> Logon Script:         login.bat
>> Profile Path:         \\eastrand\desires\profile
>> Domain:               XXXXX-ZA-DM
>> Account desc:
>> Workstations:
>> Munged dial:
>> Logon time:           0
>> Logoff time:          Fri, 13 Dec 1901 22:45:51 GMT
>> Kickoff time:         Fri, 13 Dec 1901 22:45:51 GMT
>> Password last set:    Thu, 13 Feb 2003 13:24:06 GMT
>> Password can change:  0
>> Password must change: Fri, 13 Dec 1901 22:45:51 GMT
>> [root at eastrand root]#
>>
>>    Now I have an LDAP passdb, and I have done a
>> [root at eastrand root]# net groupmap list
>> Domain Users (S-1-5-21-3795178988-3942151060-2329322268-513) -> ntusers
>> Domain Computers (S-1-5-21-3795178988-3942151060-2329322268-515) -> 
>> machines
>> Domain Admins (S-1-5-21-3795178988-3942151060-2329322268-512) -> ntadmin
>> Domain Guests (S-1-5-21-3795178988-3942151060-2329322268-514) -> nobody
>>
>>    And
>>
>> [root at eastrand root]# getent passwd |grep -i des
>> desires:x:21504:10000:Desire:/home/users/desires:/sbin/nologin
>>
>>    Has anyone got an idea of what I am missing ...
>>
>> Mailed
>> Lee
>>
>>  
>
>
>