[Samba] String to SID

Matthew Preskett grit.monkey at yahoo.co.uk
Wed Sep 13 09:51:56 GMT 2006

After upgrading from samba 3.0.22 to 3.0.23a (FC 5) i started having problems with groups and access to shares. (using winbind for group mapping)

Looking in my smbd.log i found errors relating to string_to_sid:

string_to_sid: Sid Domain Admins does not start with 'S-'.

I tried specifying the group in different way in the smb.conf:

"DOMAIN+Domain Admins"
"@Domain Admins"
"Domain Admins"
"domain admins"

etc etc

When running the command:

wbinfo -n "Domain Admins"
S-1-5-21-1390067357-1580818891-725345543-512 Domain Group (2)

I got a valid SID back.

After specifying the SID in smb.conf i could get access to the shares.

If anyone could shed some light on the problem it would be much appreciated, i'm new to samba so i do apologise if it's my mistake.

Cheers Matt

More information about the samba mailing list