[Samba] Error on classicupgrade - Unable to get id for sid

[Stéphane PURNELLE]

You must change this in your samba 3.x ldap tree, not in samba4 ldb.
SID S-1-5-21-xxxx-500 is correct value for Administrator


-----------------------------------
Stéphane PURNELLE                         Admin. Systèmes et Réseaux 
Service Informatique       Corman S.A.           Tel : 00 32 (0)87/342467

samba-bounces at lists.samba.org wrote on 30/08/2013 16:32:44:

> De : Andreas Grabner <andreas at vianova.cc>
> A : 
> Cc : samba at lists.samba.org
> Date : 30/08/2013 16:33
> Objet : Re: [Samba] Error on classicupgrade - Unable to get id for sid
> Envoyé par : samba-bounces at lists.samba.org
> 
> Hi,
> 
> Thank you!
> my admin has SID xxxx-500. I tried to change but
> 
> ./bin/ldbmodify -H private/sam.ldb Admin.ldif 
> ERR: (Unwilling to perform) "samldb: objectSid must not be 
> specified!" on DN CN=Administrator,CN=Users,DC=hla-gs,DC=at at block
> before line 6
> Modify failed after processing 0 records
> 
> Now what? Need help again
> 
> Andreas
> 
> ----- "Stéphane PURNELLE" <stephane.purnelle at corman.be> schrieb:
> 
> > Hi,
> > 
> > Verify if Administrator have SID S-1-5-21-xxxxx-512 and root have uid
> > = 0 
> > and a SID 
> > 
> > your ldap tree must not have user with SID S-1-5-32-544 or other group
> > 
> > like this
> > 
> > 
> > -----------------------------------
> > Stéphane PURNELLE                         Admin. Systèmes et Réseaux 
> > Service Informatique       Corman S.A.           Tel : 00 32
> > (0)87/342467
> > 
> > samba-bounces at lists.samba.org wrote on 30/08/2013 15:56:40:
> > 
> > > De : Andreas Grabner <andreas at vianova.cc>
> > > A : samba at lists.samba.org, 
> > > Date : 30/08/2013 15:57
> > > Objet : [Samba] Error on classicupgrade - Unable to get id for sid
> > > Envoyé par : samba-bounces at lists.samba.org
> > > 
> > > Hi,
> > > 
> > > i have a problem  upgrading an old samba 3.5.x to 4.0.9. The
> > upgradeends 
> > with:
> > > 
> > > Setting password for administrator
> > > Administrator password has been set to password of user 'root'
> > > set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER.
> > > ERROR(runtime): uncaught exception - (-1073741734, 
> > 'NT_STATUS_INVALID_OWNER')
> > >   File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/
> > > __init__.py", line 175, in _run
> > >     return self.run(*args, **kwargs)
> > >   File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/
> > > domain.py", line 1318, in run
> > >     useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
> > >   File "/usr/local/samba/lib/python2.7/site-packages/samba/
> > > upgrade.py", line 935, in upgrade_from_samba3
> > >     result.names.domaindn, result.lp, use_ntvfs)
> > >   File "/usr/local/samba/lib/python2.7/site-packages/samba/
> > > provision/__init__.py", line 1562, in setsysvolacl
> > >     setntacl(lp,sysvol, SYSVOL_ACL, str(domainsid), 
> > > use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=s4_passdb)
> > >   File "/usr/local/samba/lib/python2.7/site-packages/samba/
> > > ntacls.py", line 154, in setntacl
> > >     smbd.set_nt_acl(file, security.SECINFO_OWNER | 
> > > security.SECINFO_GROUP | security.SECINFO_DACL |
> > security.SECINFO_SACL, 
> > sd)
> > > 
> > > Seems to be a problem with SID S-1-5-32-544 right?
> > > 
> > > router1:/usr/local/samba# ./bin/samba-tool ntacl sysvolreset
> > > X:  S-1-5-21-1291026335-3787069601-4058188190-500
> > > X:  S-1-5-32-544
> > > ERROR(<class 'passdb.error'>): uncaught exception - Unable to get id
> > for 
> > sid
> > >   File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/
> > > __init__.py", line 175, in _run
> > >     return self.run(*args, **kwargs)
> > >   File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/
> > > ntacl.py", line 207, in run
> > >     (BA_gid,BA_type) = s4_passdb.sid_to_id(BA_sid)
> > > 
> > > 
> > > At the moment i have no idea how to fix it. I already checked for 
> > > duplicate SIDs, names, wrong flags, domains.
> > > I would need some help please
> > > 
> > > best regards
> > > Andreas 
> > > 
> > > 
> > > -- 
> > > Andreas Grabner
> > > +43 676 840 775 101
> > > andreas at vianova.cc
> > > 
> > > vianova mediendesign gmbh
> > > Augasse 24 
> > > A- 7400 oberwart
> > > +4333 52 / 32 860
> > > www.vianova.cc
> > > -- 
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  https://lists.samba.org/mailman/options/samba
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> 
> -- 
> Andreas Grabner
> +43 676 840 775 101
> andreas at vianova.cc
> 
> vianova mediendesign gmbh
> Augasse 24 
> A- 7400 oberwart
> +4333 52 / 32 860
> www.vianova.cc
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba