[Samba] wbinfo / Could not convert sid to gid / uid

[Georg Roelli]

________________________________
> Date: Tue, 8 Dec 2009 08:55:05 -0700
> Subject: Re: [Samba] wbinfo / Could not convert sid to gid / uid
> From: robert at leblancnet.us
> To: roellig at hotmail.com
> CC: samba at lists.samba.org
>
> On Tue, Dec 8, 2009 at 7:55 AM, Georg Roelli> wrote:
>
>
>
> Hello
>
>
>
> My is environment: Ubuntu 8.04 LTS, Squid 2.6.18, Samba 3.0.28a
>
>
>
> For Squid I need the query of a global group from Active Directory 2003.
>
> This works beautifully, but unfortunately not always. There are global groups which works to transform and others where it does not work.
>
>
>
> Here are my entries for test:
>
>
>
> # wbinfo -n nobadurl
>
> S-1-5-21-986273330-1409306274-1541874228-9965 Domain Group (2)
>
>
>
> # wbinfo -Y S-1-5-21-986273330-1409306274-1541874228-9965
>
> Could not convert sid S-1-5-21-986273330-1409306274-1541874228-9965 to gid
>
>
>
> # wbinfo -n www-Access
>
> S-1-5-21-986273330-1409306274-1541874228-2514 Domain Group (2)
>
>
>
> # wbinfo -Y S-1-5-21-986273330-1409306274-1541874228-2514
>
> 10011
>
>
>
> I am a little confused. Why the conversion goes for one group but for the other one not?
>
> I've tried a lot, unfortunately without success.
>
>
>
> Is there a log I can turn on what can help me?
>
> What is the value wbinfo take out of the AD to convert the SID to UID or GID?
>
> Is there another way I can figure out why the conversion does not work?
>
>
>
> Thanks for your help.
>
>
>
> Kind regards, G.
>
>
>
> I would check /var/log/samba/log.winbindd or /var/log/samba/log.wb.. I would suspect that you may have run out of gids allocated to groups (your rang is not big enough). The logs should help you pinpoint the problem though.
>
>
> Robert LeBlanc
> Life Sciences & Undergraduate Education Computer Support
> Brigham Young University
>
>
 
Thanks for the note.
 
I get following results in the logs for those SID which couldn't convert.
 
log.winbindd:
 
[2009/12/09 10:57:14, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491)
  [15791]: request interface version
[2009/12/09 10:57:14, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524)
  [15791]: request location of privileged pipe
[2009/12/09 10:57:14, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308)
  [15791]: sid to gid S-1-5-21-986273330-1409306274-1541874228-9965
 
log.wb-MYDOM:

[2009/12/09 10:57:14, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupsid(754)
  [21931]: lookupsid S-1-5-21-986273330-1409306274-1541874228-9965
[2009/12/09 10:57:14, 3] nsswitch/winbindd_ads.c:sequence_number(1010)
  ads: fetch sequence_number for MYDOM
[2009/12/09 10:57:14, 3] nsswitch/winbindd_rpc.c:msrpc_sid_to_name(304)
  sid_to_name [rpc] S-1-5-21-986273330-1409306274-1541874228-9965 for domain MYDOM
 
How can this help us now?
 
Regards, G.

 
 
 
 

  		 	   		  
_________________________________________________________________
Samichlaus und Weihnachts Fotos: direkt im Messenger mit Freunden austauschen
http://www.microsoft.com/switzerland/windows/de/windowslive/products/messenger.aspx?tab=2