AW: [Samba] create_canon_ace_lists: unable to map SID

Stefan Sabolowitsch Stefan.Sabolowitsch at
Fri May 6 14:50:34 GMT 2005

Hi Ian,

Thanks for the fast answer.
How can I find out whether this is the NT domains SID?
The interesting is that i can see all files/Dirs without problems in the
Filebrowser of Arcserve.



 -----Ursprüngliche Nachricht-----
Von: 	Ian Clancy [mailto:clancyian at] 
Gesendet:	Freitag, 6. Mai 2005 16:41
An:	Stefan Sabolowitsch; samba at
Betreff:	Re: [Samba] create_canon_ace_lists: unable to map SID

Stefan Sabolowitsch wrote:

>Hi List,
>I have here following:
>OS = RHEL Clone 4
>Samba = 3.01014
>Now to the problem.
>I have here two NT domains to trust itself.
>In domain 1 there are Samba V3.0x (RHEL4) and in domain 2 Samba V2.21.
>security = DOMAIN
>password server = (NT SV)
>no winbind
>In domain 1 on a NT PDC there is the software Arcserve.
>In Arcserve there is a job, which is to copy (Samba Share) something from
>Samba domain 2 to Samba domain 1.
>I can select the files in the Shares with Arcserve without problems,
>start i however the job get i the following error message.
>May  6 09:04:35 sfe002 smbd[7709]: [2005/05/06 09:04:35, 0]
>May  6 09:04:35 sfe002 smbd[7709]:   create_canon_ace_lists: unable to map
>SID S-1-5-21-2063521273-132496769-2852514901-2000 to uid or gid.
>I did not have this problem still before a few days. Because here domain 1
>had also a Samba 2.x
>Only as in domain 1 the RHEL4 with Samba 3.x was installed gives it this
>Possibly an idea?
>Thanks for each assistance
I have seen this problem with Arcserve also. Basically, There is a 
problem with the account that arcserve is accessing the share with. Is
S-1-5-21-2063521273-132496769-2852514901 your domain SID ?. If not this 
is the root of your problem.

Ian Clancy
IT Systems Engineer
Connaught Electronics Ltd.
Dunmore Rd,
Co. Galway,

P : ++353 93 23151
F : ++353 93 23110
E : mailto:clancyian at
W :

More information about the samba mailing list