[Samba] String to SID

Michael Gasch gasch at eva.mpg.de
Wed Sep 13 15:01:53 GMT 2006


try using fully qualified domain names

micha

Matthew Preskett wrote:
> After upgrading from samba 3.0.22 to 3.0.23a (FC 5) i started having problems with groups and access to shares. (using winbind for group mapping)
> 
> Looking in my smbd.log i found errors relating to string_to_sid:
> 
> string_to_sid: Sid Domain Admins does not start with 'S-'.
> 
> I tried specifying the group in different way in the smb.conf:
> 
> "DOMAIN+Domain Admins"
> "@Domain Admins"
> "Domain Admins"
> "domain admins"
> 
> etc etc
> 
> When running the command:
> 
> wbinfo -n "Domain Admins"
> S-1-5-21-1390067357-1580818891-725345543-512 Domain Group (2)
> 
> I got a valid SID back.
> 
> After specifying the SID in smb.conf i could get access to the shares.
> 
> If anyone could shed some light on the problem it would be much appreciated, i'm new to samba so i do apologise if it's my mistake.
> 
> Cheers Matt
> 
> 
> 



More information about the samba mailing list