[Samba] Problem when "valid users" is used

Arnaud BLONDEL - Alter Way Solutions arnaud.blondel at alterway.fr
Thu Sep 30 03:07:58 MDT 2010


On 30/09/2010 10:46, Harry Jede wrote:
> Try to run the same search as Samba does:
>
> ldapsearch -s sub -b "ou=Groups,dc=company,dc=com" "(&(objectClass=sambaGroupMapping)(|
> (displayName=Developpeurs)(cn=Developpeurs)))"
>

ldapsearch -x -s sub -b 'ou=Groups,dc=company,dc=com' 
"(&(objectClass=sambaGroupMapping)(|(displayName=Developpeurs)(cn=Developpeurs)))"

dn: cn=Developpeurs,ou=Groups,dc=company,dc=com
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: Developpeurs
gidNumber: 1005
sambaSID: S-1-5-21-1003513250-1319205365-1235820382-1015
sambaGroupType: 2
displayName: Developpeurs
description: Le groupe des programmeurs
memberUid: test
...
...

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1


> Samba find this SID S-1-5-21-1003513250-1319205365-1235820382-1015 for your group, but
> according to your ldif, the SID for Developpeurs is:
> S-1-5-21-1003513250-1319205365-1235820382-101
>
> So you may have a duplicate entry :-( .
>

Output is wrong, SID is S-1-5-21-1003513250-1319205365-1235820382-1015


 > SAMBA : Version 3.3.2


More information about the samba mailing list