[Samba] Samba 3.0.9 Available for Download

[Gémes Géza]

Filipi Vianna írta:

>After I upgrade to samba-3.0.9, the workstations stoped to
>log at the domain. All of them was telling that there were a mal functioning 
>device installed. So I checked the logs and got the following stuff
>
>[2004/11/19 23:13:51, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(766)
>  _net_sam_logon: user DEM\filipi has user sid S-1-5-21-4106639886-1430112138-3030331933-3136
>   but group sid S-1-5-21-568478557-3381719882-370605216-1411.
>  The conflicting domain portions are not supported for NETLOGON calls
>...
>[2004/11/19 23:20:53, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1397)
>  failed to decode PDU
>[2004/11/19 23:20:53, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
>  process_request_pdu: failed to do schannel processing.
>[2004/11/19 23:22:05, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(786)
>  api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
>
>
>I didn't understant what is wrong with the SIDs... 
>I have the domain groups mapped to the unix groups and the group of the user
>I am using to test is mapped as follows:
>staff (S-1-5-21-568478557-3381719882-370605216-1411) -> staff
>
>And the user SID is S-1-5-21-4106639886-1430112138-3030331933-3136
>But what is wrong? I downgraded again to 3.0.5 and everything is fine...
>All stations are loging at the domain again...
>
>Regards,
>  
>
I've noted one strange thing in your data:
User SID:

S-1-5-21-4106639886-1430112138-3030331933-3136

And group SID:

S-1-5-21-568478557-3381719882-370605216-1411

However user and group sids must be computed as Domain SID-OBJECT RID

so your user RID is 3136
and your group RID is 1411

this are fine, the problem is, that the Domain SID parts are different!

you should check what net getlocalsid returns, this should be your domain sid, and modify all conflicting user and/or group sids, to match this.

Good Luck!

Geza Gemes