[Samba] Samba using a MySQL passdb for machine records

[Andrew Gray]

Greetings.  I'm using Samba 3.0.3 with the MySQL auth backend, as a NT
domain controller.  I'm having some issues trying to get machines to
join the domain.  In full debug, I see samba queries the machines
database (I have two seperate MySQL passdb sources, one for users, one
for machines), and does retrieve the record.  However, it then returns a
NT_STATUS_NONE_MAPPED for no apparent reason.  I got this error before,
when I didn't have SIDs set, but a) there was a seperate message about
that in the log which isn't appearing now and b) SIDs are set and being
retrieved.  Is there something else that could cause
NT_STATUS_NONE_MAPPED during machine joining?

Log:
[2004/05/05 15:28:45, 5]
passdb/pdb_mysql.c:mysqlsam_select_by_field(237)
  Executing query SELECT
NULL,NULL,NULL,'1000000000','1000000000','4000000000',CONCAT(hostname,
"$"),'EGR2',CONCAT(hostname, "$"),CONCAT(hostname, '.',
domain),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,systemSid,systemSid,LANMANHash,NTHash,NULL,NULL,NULL,NULL,'5',NULL,NULL FROM network_info_sambatest WHERE CONCAT(hostname, "$") = 'BLARGH-VM-WINXP$'
[2004/05/05 15:28:45, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/05/05 15:28:45, 5]
rpc_parse/parse_samr.c:init_samr_r_lookup_names(4709)
  init_samr_r_lookup_names
[2004/05/05 15:28:45, 5]
rpc_server/srv_samr_nt.c:_samr_lookup_names(1445)
  _samr_lookup_names: 1445
[2004/05/05 15:28:45, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 samr_io_r_lookup_names
[2004/05/05 15:28:45, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0000 num_rids1: 00000000
[2004/05/05 15:28:45, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0004 ptr_rids : 00000000
[2004/05/05 15:28:45, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0008 num_types1: 00000000
[2004/05/05 15:28:45, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      000c ptr_types : 00000000
[2004/05/05 15:28:45, 5] rpc_parse/parse_prs.c:prs_ntstatus(665)
      0010 status: NT_STATUS_NONE_MAPPED
[2004/05/05 15:28:45, 5] rpc_server/srv_pipe.c:api_rpcTNP(1549)
  api_rpcTNP: called samr successfully

Config for that passdb source:
   systems:mysql host = mydbhost
   systems:mysql user = user
   systems:mysql password = password
   systems:mysql database = network
   systems:table = network_info_sambatest
   systems:logon time column = NULL:
   systems:logoff time column = NULL:
   systems:kickoff time column = NULL:
   systems:pass last set time column = '1000000000':
   systems:pass can change time column = '1000000000':
   systems:pass must change time column = '4000000000':
   systems:username column = CONCAT(hostname, "$"):
   systems:domain column = 'EGR2':
   systems:nt username column = CONCAT(hostname, "$"):
   systems:fullname column = CONCAT(hostname, '.', domain):
   systems:home dir column = NULL:
   systems:dir drive column = NULL:
   systems:logon script column = NULL:
   systems:profile path column = NULL:
   systems:acct desc column = NULL:
   systems:workstations column = NULL:
   systems:unknown string column = NULL:
   systems:munged dial column = NULL:
   systems:user sid column = systemSid
   systems:group sid column = systemSid
   systems:lanman pass column = LANMANHash
   systems:nt pass column = NTHash
   systems:plain pass column = NULL:
   systems:acct ctrl column = NULL:
   systems:unknown 3 column = NULL:
   systems:logon divs column = NULL:
   systems:hours len column = NULL:
   systems:bad password count column = '5':
   systems:logon count column = NULL:
   systems:unknown 6 column = NULL:

pdbedit -u BLARGH-VM-WINXP$ -v ends with:

Executing query SELECT
NULL,NULL,NULL,'1000000000','1000000000','4000000000',CONCAT(hostname,
"$"),'EGR2',CONCAT(hostname, "$"),CONCAT(hostname, '.',
domain),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,systemSid,systemSid,LANMANHash,NTHash,NULL,NULL,NULL,NULL,'5',NULL,NULL FROM network_info_sambatest WHERE CONCAT(hostname, "$") = 'BLARGH-VM-WINXP$'
Account not autolocked, no check needed
No bad password attempts.
Unix username:        blargh-vm-winxp$
NT username:          blargh-vm-winxp$
Account Flags:        [           ]
User SID:            
S-1-5-352321536-804289157-1853071673-2171392347-41386
Primary Group SID:   
S-1-5-352321536-804289157-1853071673-2171392347-41386
Full Name:            blargh-vm-winxp.Egr.UNLV.EDU
Home Directory:
HomeDir Drive:
Logon Script:
Profile Path:
Domain:               EGR2
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          0
Kickoff time:         0
Password last set:    Sat, 08 Sep 2001 18:46:40 GMT
Password can change:  Sat, 08 Sep 2001 18:46:40 GMT
Password must change: Mon, 18 Jan 2038 19:14:07 GMT
Last bad password   : 0
Bad password count  : 0

-- 
Andrew Gray
Systems Administrator
College of Engineering
University of Nevada, Las Vegas