[Samba] Re: Samba 3.0.12 (gid of user [joe] doesn't exist) Weird error when Client logs on.

[Peter Shull]

I resolved my own problem with this (it seems, I never deleted the
old, old smbd binary and didn't realize I was running it....stupid,
stupid mistake).  Anyhow, I am now running the latest version of samba
released today 3.0.13.  I have a couple of new problems.  I get no
errors anymore in any logs.  But, I still don't have administrator
rights.

My "Domain Admins" is still mapped to my /etc/group of 'admin' and my
user joe is still located in group admin.

2 new things are happening.  
Upon logon, I now get a profile error.  
"Windows Did not load your profile because a server copy of the
profile folder already exists that does not have the correct security.
Either the current user or the administror's group must be the owner
of the folder."

The admin.bat script no longer loads either. 

On Thu, 24 Mar 2005 10:23:40 -0500, Peter Shull <drgn65 at gmail.com> wrote:
> Hi,
> 
> I just recently purchased a new server and took this opportunity to
> upgrade to the latest version of samba (3.0.12).  Unfortunatly, I have
> some weird occurances.  I have a user called "joe" who is my admin
> user.
> 
> In /etc/passwd I have this:
> joe:x:500:500:Joe:/home/joe:/bin/bash
> 
> In /etc/group I have this:
> admin:x:500:joe
> 
> id returns correctly:
> uid=500(joe) gid=500(admin) groups=500(admin)
> 
> I have a very simple samba setup.  With only 2 users (and 1 machine
> account) in my smbpasswd.  I can login fine and it appears everything
> works.  Unfortunatly, I can see that I am not a domain admin when I
> login.  When I look in /var/log/samba I get an odd message (which is
> below) and the same message in /var/log/messages.  I also modified net
> groupmap to map my unix group to the Domain Admin group (that is below
> too).
> 
> The weird thing is that I have my logon script = %G.bat. I have a file
> called admin.bat located in /home/netlogon and when I login, that
> script loads.
> 
> Any help would be greatly appreciated!!!
> Thanks,
> Peter
> 
> From /var/log/messages
> Mar 24 09:53:52 lifesaver2 smbd[927]: [2005/03/24 09:53:52, 0]
> rpc_server/srv_util.c:get_alias_user_groups(206)
> Mar 24 09:53:52 lifesaver2 smbd[927]:   get_alias_user_groups: gid of
> user joe doesn't exist. Check your /etc/passwd and /etc/group
> 
> From /var/log/samba/log.clientpc
> [2005/03/24 09:53:52, 1] rpc_server/srv_util.c:get_domain_user_groups(298)
>  get_domain_user_groups: primary gid of user [joe] is not a Domain group !
>  get_domain_user_groups: You should fix it, NT doesn't like that
> [2005/03/24 09:53:52, 0] rpc_server/srv_util.c:get_alias_user_groups(206)
>  get_alias_user_groups: gid of user joe doesn't exist. Check your
> /etc/passwd and /etc/group files
> 
> System Operators (S-1-5-32-549) -> -1
> Domain Guests (S-1-5-21-2616513916-3767059419-2471733091-514) -> -1
> Replicators (S-1-5-32-552) -> -1
> Guests (S-1-5-32-546) -> -1
> Power Users (S-1-5-32-547) -> -1
> Print Operators (S-1-5-32-550) -> -1
> Administrators (S-1-5-32-544) -> -1
> Domain Users (S-1-5-21-2616513916-3767059419-2471733091-513) -> domainuser
> Account Operators (S-1-5-32-548) -> -1
> Backup Operators (S-1-5-32-551) -> -1
> Users (S-1-5-32-545) -> -1
> Domain Admins (S-1-5-21-2616513916-3767059419-2471733091-512) -> admin
>