[Samba] Many msgs log.winbindd about
"group xxxxx in domain yyyyy does not exist"
Kent Wick
Kent.Wick at ers.state.tx.us
Wed Apr 26 13:54:33 GMT 2006
I am seeing many, many msgs in log.winbindd with the following text:
[2006/04/14 08:54:29, 1] nsswitch/winbindd_group.c:winbindd_getgrnam(255)
group system in domain AIXSAMBA does not exist
Would anybody be able to point me in the right direction to determine what this is complaining about?
One area I do not understand is why it is complaining about AIXSAMBA (the NETBIOS name).
There is an entry in /etc/group for the "system" group (GID = 0).
I do have some directories in one of the samba shares with an acl set as follows:
*
* ACL_type AIXC
*
attributes:
base permissions
owner(root): rwx
group(win_domain_users): rwx
others: r-x
extended permissions
enabled
permit rwx g:system
Environment:
AIX 5.3: long names enabled (31 char including ending zero), using pam for authentication
Samba 3.0.22 (compiled from source), configure options were:
--with-pam --with-acl-support --with-aio-support --with-winbind
smb.conf contents:
[global]
workgroup = ERSSECURITY
netbios name = AIXSAMBA
server string = Samba3
security = DOMAIN
log file = /usr/local/samba/var/log.%m
log level = 1
algorithmic rid base = 500000
winbind uid = 100001-500000
winbind gid = 100001-500000
[denali_d]
path = /samba/denali01
acl group control = yes
create mask = 0775
directory mask = 2775
# force group = win_domain_cntlr
# inherit acls = yes
inherit permissions = yes
read only = no
writeable = yes
guest ok = no
admin users = @win_domain_admin
[denali_f]
path = /samba/denali02
acl group control = yes
create mask = 0775
directory mask = 2775
force group = win_domain_admin
# inherit acls = yes
inherit permissions = yes
read only = no
writeable = yes
guest ok = no
admin users = @win_domain_admin
Results from wbinfo -g:
BUILTIN\system operators
BUILTIN\administrators
followed by all the groups in the WinNT PDC domain.
Results from "net groupmap list":
System Operators (S-1-5-32-549) -> win_sys_oper
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Controllers (S-1-5-21-1748253822-1525897820-1959552931-3641) -> win_domain_cntlr
Domain Admins (S-1-5-21-3484108990-1107034133-219603564-512) -> win_domain_admin
Domain Guests (S-1-5-21-3484108990-1107034133-219603564-514) -> -1
Power Users (S-1-5-32-547) -> -1
Domain Users (S-1-5-21-3484108990-1107034133-219603564-513) -> win_domain_users
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> win_administrator
Account Operators (S-1-5-32-548) -> -1
Backup Operators (S-1-5-32-551) -> -1
Users (S-1-5-32-545) -> -1
The "win_xxxxx" groups above are in the /etc/group file as:
win_sys_oper:!:5001:
win_domain_admin:!:5002:user1,user2,user3,user4
win_administrator:!:5003:user1,user2
win_domain_users:!:5004:user5,user6,user7,user3,user1,usert,user2,user8
win_domain_cntlr:!:5005:
Thanks for any assistance/advice that y'all can provide.
K Wick, Texas Emp Retirement Syst
Phone: 512-867-7325
More information about the samba
mailing list