[Samba] Could not convert sid ..... to ..... gid

[Moray Henderson]

Olaf.Boldt at hvbg.hessen.de wrote:
> Since a few weeks I have Squid Version 2.7.STABLE7 on Ubuntu Server
> 10.04. All worked fine - different users in an AD-Group could reach the
> internet through my proxy. Because of this my Squid-configuration seems
> to be OK. Since the name of the AD-Group was changed it is no more
> possible to reach the internet through the proxy. The error is:
> "Access control configuration prevents your request from being allowed
> at this time."
> 
> Switching to the old group name all works fine again, switching to the
> new one: the same error as above.
> 
> I changed the debug options and found this entry in cache.log:
> "Could not convert sid S-1-5-21-3365863304-72330373-946326852-415981 to
> gid"
> 
> >From the Squid Mailing List I got the answer that this is a problem of
> Samba and/or winbind.
> I have installed:
> samba  2:3.4.7~dfsg-1ubuntu3.5
> winbind 2:3.4.7~dfsg-1ubuntu3.5

Maybe the Samba group mapping for the new AD-Group name to Unix group is not
set up.  Use "net groupmap list" to see what the current mappings are, and
see the Samba doc
http://samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html for
adding new ones.



Moray.
"To err is human; to purr, feline."