[Samba] cannot change file permissions

Matthias Eichler mylists at ame.de
Mon Mar 15 16:07:20 GMT 2004


Hi List,

I have some severe problem with Samba 3 with ldapsam
backend on debian stable.

The problem is that I can not change the rights
of a file or directory on the server from Windows.

I get this in smb.log:
---cut---
[2004/03/14 21:59:09, 0] smbd/posix_acls.c:create_canon_ace_lists(1380)
  create_canon_ace_lists: unable to map SID
S-1-5-21-2443489570-4015384086-1858331161-3009 to uid or gid.
---cut---

3009 is the correct rid(?) of the gid 1004.
This is also correctly mapped:
---cut---
Buchhaltung (S-1-5-21-2443489570-4015384086-1858331161-3009) ->
buchhaltung
---cut---

Unfortunately this also happens with users:
---cut---
[2004/03/14 21:56:37, 0] smbd/posix_acls.c:create_canon_ace_lists(1380)
  create_canon_ace_lists: unable to map SID
S-1-5-21-2443489570-4015384086-1858331161-3016 to uid or gid.
---cut---
In this case 3016 is the right rid for the user with the uid 1008.
But this user has also the correct attributes in ldap:
---cut---
#
# filter: uid=lf
# requesting: ALL
#

# lf, RDS, KERNZEIT, COM
dn: uid=lf,ou=RDS,dc=KERNZEIT,dc=COM
objectClass: top
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: sambaSamAccount
cn: lf
sn: lf
uidNumber: 1008
gidNumber: 100
homeDirectory: /home//lf
loginShell: /bin/bash
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaSID: S-1-5-21-2443489570-4015384086-1858331161-3016
sambaPrimaryGroupSID: S-1-5-21-2443489570-4015384086-1858331161-513
sambaHomeDrive: H:
sambaHomePath: \\LOGIN\homes
sambaProfilePath: \\LOGIN\profile\lf
sambaPwdMustChange: 1082893749
sambaLMPassword: *snip*
sambaPwdLastSet: 1079005749
sambaAcctFlags: [U]
sambaNTPassword: *snip*
userPassword:: *snip*
displayName: Lukas Frese
sambaLogonScript: login.bat
gecos: Lukas Frese
description: Lukas Frese
uid: lf
---cut---

Help is really appreciated as I am stucking with this problems for such
a long time now without any light at the end of the tunnel!

Thanks very much,

Matthias Eichler


More information about the samba mailing list