[Samba] Moving a computer from a down domain to a new domain

Robert Moskowitz rgm at htt-consult.com
Thu Apr 11 18:39:30 MDT 2013


I had been running a samba server, the AMAHI F12 distro, that has samba 
3.4.9.  It ran well enough, but I was planning on replacing it with 
ClearOS.  Well monday night I lost my server harddrive, so now it is 
crunch time to update/upgrade.

I think I have ClearOS configured properly, it is running samba 3.6.10 
(Redhat 6.4 based).  So far I have tried to add two of my XP systems to 
the new domain.  The process I have been using (and what I did 4 years 
ago when I moved them from a REAL NT domain to the samba domain) was to 
first login locally as administrator and using System Properties > 
Computer Name >Domain Change to move the computer to a workgroup called 
SELF.  I then reboot and use the same dialog to join the new domain, 
HOME.  The old domain was HDA, but a prior domain was also HOME.  This 
fails and in the samba logs I see:

[2013/04/11 20:22:29.563127,  0] auth/check_samsec.c:491(check_sam_security)
   check_sam_security: make_server_info_sam() failed with 
'NT_STATUS_UNSUCCESSFUL'
[2013/04/11 20:26:01.504397,  1] auth/server_info.c:386(samu_to_SamInfo3)
   The primary group domain 
sid(S-1-5-21-3360932306-3333476405-2840157550-513) does not match the 
domain sid(S-1-5-21-4240919292-2417995422-4236335894) for 
winadmin(S-1-5-21-4240919292-2417995422-4236335894-302)
[2013/04/11 20:26:01.504589,  0] auth/check_samsec.c:491(check_sam_security)
   check_sam_security: make_server_info_sam() failed with 
'NT_STATUS_UNSUCCESSFUL'
[2013/04/11 20:26:44.676638,  1] auth/server_info.c:386(samu_to_SamInfo3)
   The primary group domain 
sid(S-1-5-21-3360932306-3333476405-2840157550-513) does not match the 
domain sid(S-1-5-21-4240919292-2417995422-4236335894) for 
rgm(S-1-5-21-4240919292-2417995422-4236335894-1000)
[2013/04/11 20:26:44.676804,  0] auth/check_samsec.c:491(check_sam_security)
   check_sam_security: make_server_info_sam() failed with 
'NT_STATUS_UNSUCCESSFUL'

rgm is a user on the system that has admin priv, and a user on the samba 
server that is in the domain_admin group.

What is with the SID problem?  How do I clean this up?




More information about the samba mailing list