[Samba] Failed to create Administrators, Failed to create Users

[yvan]

Hey !

I finally managed to get rid of those messages "Failed to create 
Administrators" and "Failed to create Users" in the logfile.
It seems there is a small bug with winbind when it is used with the 
"idmap backend = rid:DOMAIN=100000-200000".
With such a configuration, winbind can't create any BUILTIN group 
(Administrators, Users, Guests, Operators, ...), even if you try to 
force it with :

net sam createbuiltingroup

What I've done is to reset conf.conf to the standard "idmap backend = 
tdc", restart samba and winbind, issue the command :

net sam createbuiltingroup
successfully. Then you can see the mappings with "net groupmap list 
verbose".

Last, set winbind back to "idmap backend = rid ..." like it was before. 
Restart samba and winbind, and pooof ! Error messages are gone !!!

It took me a long time to discover that!

Regards
Yvan Broccard


Jacek Kowalski a écrit :
> Hi,
>
> Since I install Samba 3.0.23d on my Centos5 with kernel 
> 2.6.18-8.1.10.el5 #1 SMP I've the following messages in my logfile:
>
> Oct  3 16:45:22  smbd[6174]: [2007/10/03 16:45:22, 0] 
> auth/auth_util.c:create_builtin_administrators(785) Oct  3 16:45:22  
> smbd[6174]:   create_builtin_administrators: Failed to create 
> Administrators Oct  3 16:45:22  smbd[6174]: [2007/10/03 16:45:22, 0] 
> auth/auth_util.c:create_builtin_users(751) Oct  3 16:45:22  
> smbd[6174]:   create_builtin_users: Failed to create Users
> Version of krb5 is 1.5-29
> This is my smb.conf:
>
> [global]
> netbios name = SERVER
> workgroup = DOMAIN
> realm = DOMAIN.NET
> security = ADS
> password server = server.domain.net
> winbind separator = +
> allow trusted domains = No
> idmap backend = idmap_rid:INFORNET=1000-65000
> idmap uid = 1000-65000
> idmap gid = 1000-65000
> template shell = /bin/bash
> winbind use default domain = Yes
> winbind enum users = No
> winbind enum groups = No
> winbind nested groups = Yes
> log file = /var/log/samba/%I.log
>       log level = 3
> max log size = 500
> smb ports = 139
> guest account = guest
> encrypt passwords = yes
> username map = /etc/samba/smbusers
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> dns proxy = no
>
> [homes]
> comment = Home Directories
> browseable = no
> writable = yes
> create mask = 664
> directory mask = 0775
>
> [source1]
> path = /home/source1
> public = yes
> valid users = @DOMAIN+group1
> read list = @DOMAIN+group1
> write list = @DOMAIN+group1
> force group = group1
> writable = yes
> printable = no
> browseable = yes
> create mask = 0665
> force directory mode = 0775
> guest ok = yes
>
>
> Anybody knows how to fix it?
>
> Regards
> Jaco
>
>
>