[Samba] pdbedit: '-G rid' doesn't seem to have any effect

Chris Hall chris.hall at halldom.com
Fri Feb 9 08:42:54 GMT 2007

On Thu, 8 Feb 2007 Gerald (Jerry) Carter ("Gerald (Jerry) Carter" 
<jerry at samba.org>) wrote
>Chris Hall wrote:
>> 'pdbedit -r -u agrotera$ -G 515', produced:
>>   Unix username:        agrotera$
>>   NT username:
>>   Account Flags:        [W          ]
>>   User SID:             S-1-5-21-4211105910-4270789338-3787013593-1414
>>   Primary Group SID:    S-1-5-21-4211105910-4270789338-3787013593-513
>> which is to say, nothing changed and no error or warning message was
>> given.

>I'll remove the -G option today.  But the reported primary group
>should reflect the real Unix group membership if in fact that
>group has been mapped to a domain group.  So I'd say there's a
>bug here in pdbedit.

OK.  I'm guessing that the real problem is that the passdb.tdb contains 
an entry for Primary Group SID at all.  With the change to group 
handling in v3.0.23 the Group SIDs should be found by UNIX UID -> UNIX 
GID(s) -> Windows Group SID(s).


Chris Hall   @ Home                                         +44 (0)7970 277 383

More information about the samba mailing list