[Samba] BUIILTIN accounts with Samba 3.0.24 + LDAP

Gerald (Jerry) Carter jerry at samba.org
Mon May 21 12:29:54 GMT 2007

Hash: SHA1

Justin Zipperle wrote:

>> ...and everything worked well until I migrated all the user, machine,
>> and group accounts from the old domain and the PDC went into
>> production this morning.  Once the machine went live, I started to
>> notice that there were significant delays when connecting to shares or
>> viewing security on files or folders within shares from WinXP Pro SP2
>> workstations.  When viewing security, certain builtin accounts (Domain
>> Users, Domain Admins, etc) wouldn't resolve to their DisplayNames and
>> would instead show the SID...this after much delay.

Two things.

(a) Domain Users, etc...are not builtin groups.  BUILTIN
    represents a specific domain (S-1-5-32)
(b) make sure that you installed the latest schema file
    and included eq and sub nidexes for sambaSID
(c) group mapping entries can be view and/or modified
    using 'net sam' and 'net groupmap'

cheers, jerry
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


More information about the samba mailing list