[Samba] string_to_sid: Sid MYDOMAIN\mygroup does not start with 'S-'.

Gerald (Jerry) Carter jerry at samba.org
Tue Nov 18 14:19:03 GMT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Robinson, Eric wrote:
> I've been struggling for almost 2 weeks to get Samba working on two new
> servers.
> 
> When I try to open a Samba share from a Windows 2003 computer, I always
> get a logon challenge. I always get the following lot message
> 
> [2008/11/13 16:05:06,  3] lib/util_sid.c:string_to_sid(228)
>   string_to_sid: Sid MYDOMAIN\mygroup does not start with 'S-'.
> [2008/11/13 16:05:06,  2] smbd/service.c:make_connection_snum(732)
>   user 'MYDOMAIN\user' (from session setup) not permitted to access this
> share (ftp_site001)
> [2008/11/13 16:05:06,  3] smbd/error.c:error_packet_set(61)
>   error packet at smbd/reply.c(662) cmd=117 (SMBtconX)
> NT_STATUS_ACCESS_DENIED
> 
> The following code snippet shows where this error is coming from:
> 
> 
> <snip_start>
> 
> bool string_to_sid(DOM_SID *sidout, const char *sidstr)
> {
....
> 
> QUESTION: It looks to me as though this function is designed to convert
> a string such as MYDOMAIN\user into a SID starting with S-. 

No. it is to convert a SID char * string (S-1-....) to a binary SID
representation.  What does your smb.conf look like?







cheers, jerry
- --
=====================================================================
Samba                                    ------- http://www.samba.org
Likewise Software          ---------  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJIs7XIR7qMdg1EfYRAosVAJ9Ycg67m7fz6E4QA2M3QQFBYwARNgCfbNbK
42ooYNnJQzYEts1yai3sLp8=
=vVUm
-----END PGP SIGNATURE-----


More information about the samba mailing list