[Samba] Could not convert sid ..... to ..... gid

Aaron E. ssureshot at gmail.com
Thu May 5 13:16:58 MDT 2011


See what wbinfo --name-to-sid (group) reports for both groups , also did 
you change the ACL in squid to point to the new group?

On 05/05/2011 09:32 AM, Olaf.Boldt at hvbg.hessen.de wrote:
> Hi!
> More than a week ago I sent the below-mentioned message but did not receive any answer.
> I think that the subject heading was not correct, and so I changed it.
> Hope that I will get an answer now.
>
> Olaf
>
> --------------------
>
> Von: Boldt, Olaf (HVBG)
> Gesendet: Mittwoch, 27. April 2011 14:58
> An: 'samba at lists.samba.org'
> Betreff: Problems with Squid and Active Directory
>
> Hello!
>
> Since a few weeks I have Squid Version 2.7.STABLE7 on Ubuntu Server 10.04. All worked fine - different users in an AD-Group could reach the internet through my proxy. Because of this my Squid-configuration seems to be OK. Since the name of the AD-Group was changed it is no more possible to reach the internet through the proxy. The error is:
> "Access control configuration prevents your request from being allowed at this time."
>
> Switching to the old group name all works fine again, switching to the new one: the same error as above.
>
> I changed the debug options and found this entry in cache.log:
> "Could not convert sid S-1-5-21-3365863304-72330373-946326852-415981 to gid"
>
>  From the Squid Mailing List I got the answer that this is a problem of Samba and/or winbind.
> I have installed:
> samba  2:3.4.7~dfsg-1ubuntu3.5
> winbind 2:3.4.7~dfsg-1ubuntu3.5
>
> What to do?
>
> Thanks!
> Olaf
>



More information about the samba mailing list