[Samba] Problems to join domain (clients XP send false SID !)
manu Baylac
manu at ldd.fr
Sun Jul 27 20:46:57 GMT 2008
Hi kissg,
kissg a écrit :
> First of all, try to re-join the machine to your domain. Add the
> machines to a local workgroup (you can assign any name to it), then,
> after a reboot, try to rejoin the machines to your domain.
Already try like you say, and same problem. Retry tomorrow at work.
If this
> doesn't help, check user data in the LDAP database:
>
> id <username>
>
> you should see something like this:
>
> uid=10001(administrator) gid=512(Domain Admins) groups=512(Domain
> Admins),513(Domain Users)
>
> Check if the gid is:
>
> 512 for Domain Administrators 513 for Domain Users 514 for Domain
> Guests
>
> This is very important, because Windows determines the primary group
> based on the group id (for example, if you log in to your domain as
> the "root" user, you won't get administrator privileges on the local
> computer, because the group ID for root is always zero).
>
myserver:~# id mysuser
uid=10009(myuser) gid=513(Domain Users) groupes=513(Domain
Users),10002(group1),10004(group2)
no problem....
For information :
myserver:~# slapcat|less
[...]
dn: uid=myuser,ou=Users,dc=paf,dc=org
shadowFlag: 134538308
shadowMin: -1
uid: myuser
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: top
objectClass: person
objectClass: sambaSamAccount
homeDirectory: /home/myuser
uidNumber: 10009
shadowMax: 99999
gidNumber: 513
shadowInactive: -1
shadowLastChange: 11192
shadowExpire: 0
shadowWarning: 7
structuralObjectClass: inetOrgPerson
entryUUID: 6cbfc97c-dbc1-102c-9e95-2d2488768dcc
creatorsName: cn=admin,dc=paf,dc=org
createTimestamp: 20080701135744Z
sambaSID: S-1-5-21-1992849915-3986077062-2098313537-21018
sambaPwdMustChange: 2147483647
sambaPasswordHistory:
00000000000000000000000000000000000000000000000000000000
00000000
sambaAcctFlags: [U ]
loginShell: /bin/bash
cn: myuser name
displayName:: IA==
sn: name
givenName: myuser
gecos: myuser name
sambaPwdCanChange: 1215510194
sambaLMPassword: 89EE53044FFF514C0C240E84A183686E
sambaNTPassword: 0964A79F99FFA5D9E7F57CF29AB6BE6B
sambaPwdLastSet: 1215510194
userPassword:: e1NTSEF9blFpQ2pnamk2L0I1ekgwckpScWlSUWk5Qlo1ME42L2Y=
entryCSN: 20080708094314Z#000001#00#000000
modifiersName: cn=admin,dc=paf,dc=org
modifyTimestamp: 20080708094314Z
And as i said in other mail, always in all network except on the 2 acer
machines, and sometimes on the 2 machines, it succed
with this user.... And sometimes, it falls, because user considered by
server as guest...
Other problem (maybe a link ?), sometimes opening/terminating sessions
takes a lon time.... (15 or ... 2 mn !!)
Manu
More information about the samba
mailing list