[Samba] classicupgrade error: User 'Administrator' does not have SID ending in 500

Noël Köthe noel at debian.org
Thu Jan 16 07:27:28 MST 2014


Hello,

Am Dienstag, den 14.01.2014, 14:37 -0500 schrieb Michael Brown:

> User 'Administrator' in your existing directory has SID 
> S-1-5-21-2070472328-935435760-1634736958-1000, expected it to be 
> S-1-5-21-2070472328-935435760-1634736958-500
> ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - 
> ProvisioningError: User 'Administrator' in your existing directory does 
> not have SID ending in -500
> 
> It's not all that suprising that there's cleanups to do with this this 
> old, old Samba3 domain with an openLDAP backend, created... many years ago.
> 
> very old. much cruft. so trouble!
> 
> But this one worries me - what should I do about this?
> 
> I'm inclined to create an account 'Old Administrator', give him the 
> '-1000' SID and change the existing Administrator account to '-500'.
> 
> Does this seem like a sensible approach to take?

I did the same as you suggests and it worked. Deleted user root with SID
-500 in LDAP and changed the -1000 in your case to -500 for the
migration classicupgrade work fine for the Administrator.

-- 
Noël Köthe <noel debian.org>
Debian GNU/Linux, www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba/attachments/20140116/74d96624/attachment.pgp>


More information about the samba mailing list