[Samba] BUIILTIN accounts with Samba 3.0.24 + LDAP

Justin Zipperle justin at shaggydawg.com
Sun May 20 16:57:21 GMT 2007

Does Samba cache info about builtin accounts?  If so, where?  I'd 
appreciate any nudges in the right direction here.  I really don't have 
the option of rebuilding this server (unless there's a way to tell it 
what SID to use so that I don't have to re-migrate all of the user 

Any ideas are appreciated!  Thanks!


Justin Zipperle wrote:

> I'm having a problem with BUILTIN accounts on a Samba 3.0.24 PDC with 
> an LDAP backend on Ubuntu.  I followed this guide for setting up the 
> server:
> http://samba.org/samba/docs/man/Samba-Guide/happy.html
> ...and everything worked well until I migrated all the user, machine, 
> and group accounts from the old domain and the PDC went into 
> production this morning.  Once the machine went live, I started to 
> notice that there were significant delays when connecting to shares or 
> viewing security on files or folders within shares from WinXP Pro SP2 
> workstations.  When viewing security, certain builtin accounts (Domain 
> Users, Domain Admins, etc) wouldn't resolve to their DisplayNames and 
> would instead show the SID...this after much delay.
> I've reindexed LDAP w/ slapindex thinking this was part of the 
> problem, but it had no effect.  I can see all of the BUILTIN accounts 
> using net groupmap list and getent group, but I don't see them with 
> net rpc rights list accounts.
> Any idea what I may have changed that broke this?
> -Justin

More information about the samba mailing list