[Samba] Samba 3.0.9 Available for Download
geza at kzsdabas.sulinet.hu
Sat Nov 20 13:08:50 GMT 2004
Filipi Vianna írta:
>After I upgrade to samba-3.0.9, the workstations stoped to
>log at the domain. All of them was telling that there were a mal functioning
>device installed. So I checked the logs and got the following stuff
>[2004/11/19 23:13:51, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(766)
> _net_sam_logon: user DEM\filipi has user sid S-1-5-21-4106639886-1430112138-3030331933-3136
> but group sid S-1-5-21-568478557-3381719882-370605216-1411.
> The conflicting domain portions are not supported for NETLOGON calls
>[2004/11/19 23:20:53, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1397)
> failed to decode PDU
>[2004/11/19 23:20:53, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
> process_request_pdu: failed to do schannel processing.
>[2004/11/19 23:22:05, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(786)
> api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
>I didn't understant what is wrong with the SIDs...
>I have the domain groups mapped to the unix groups and the group of the user
>I am using to test is mapped as follows:
>staff (S-1-5-21-568478557-3381719882-370605216-1411) -> staff
>And the user SID is S-1-5-21-4106639886-1430112138-3030331933-3136
>But what is wrong? I downgraded again to 3.0.5 and everything is fine...
>All stations are loging at the domain again...
I've noted one strange thing in your data:
And group SID:
However user and group sids must be computed as Domain SID-OBJECT RID
so your user RID is 3136
and your group RID is 1411
this are fine, the problem is, that the Domain SID parts are different!
you should check what net getlocalsid returns, this should be your domain sid, and modify all conflicting user and/or group sids, to match this.
More information about the samba