[Samba] Samba Groups Vanished

[Felipe Augusto van de Wiel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 08/28/2006 09:49 AM, Diarmuid Bourke escreveu:
> Hi,
> Our Samba Groups appear to have vanished.
> 
> I've verified this by trying, "net group /domain" in windows and it
> returns no results. Trying "net rpc group -S nuada" on our master server
> returns nothing either.
> "net rpc info" on both our master and backup return
> 
> Domain Name: DIAS
> Domain SID: S-1-5-21-463069746-3761697030-3888642000
> Sequence number: 1156762378
> Num users: 63
> Num domain groups: 0
> Num local groups: 0

	Try improve the debuglevel (-d) when using net, it could
reveal some nice information to help you out (and also help the
rest of us to help you). :-)


> Groups used work until recently and they exist in our ldap database. We
> have a primary domain controller with the master ldap database on it and
> a backup domain controller with a slave ldap database on it. Our version
> of samba is Version 3.0.23 and openldap is 2.3.24

	Any special event between it working and non-working
status? Maybe a power failure, disk failure, system upgrade,
LDAP changes, anything...


> and below are the relevant sections of smb.conf from our PDC
[...]

> Trying an ldapsearch to show groups exist in ldap returns..
> 
> ldapsearch -x -b cn=geotech,ou=group,dc=cp,dc=dias,dc=ie
> 
> dn: cn=geotech,ou=group,dc=cp,dc=dias,dc=ie
> objectClass: posixGroup
> objectClass: sambaGroupMapping
> cn: geotech
> gidNumber: 1932
> sambaSID: S-1-5-21-463069746-3761697030-3888642000-4865
> sambaGroupType: 2
> displayName: geotech
> memberUid: lcollins
> memberUid: choran
> memberUid: seismo

	So, as I understood, the group *is* there. :-)

	Could you try to check 'net groupmap' man page
section, it perhaps could give you more info (do not forget
about the debuglevel).


> I've cut out configuration statements for
> briefness but if you need them I can post them. Thanks in advance.
> Diarmuid

	Hope this helps.

	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFE8wFtCj65ZxU4gPQRAi2yAJ9QVpYGWH4WLJ1ZH7uk2+XrzgybeQCcDf8Q
/NAkcAyoZ+8mB+soe+y9CPM=
=FcTi
-----END PGP SIGNATURE-----