[Samba] Missing entries in idmap.ldb

[Rowland Penny]

On 14/11/14 18:18, Marc Muehlfeld wrote:
> Hello Kirin,
>
> Am 13.11.2014 um 23:38 schrieb Kirin van der Veer:
>> When I run ldbedit on idmap.ldb some of my SIDs seem to be missing.
>> The below output demonstrates the problem quite clearly:
>>
>> root at server:/# wbinfo -n administrator
>> S-1-5-21-3663128747-3839060396-3176805764-500 SID_USER (1)
>> root at server:/# ldbedit -e /usr/bin/vim -H /var/lib/samba/private/idmap.ldb
>> objectsid=S-1-5-21-3663128747-3839060396-3176805764-500
>> # 0 adds  0 modifies  0 deletes
>> root at server:/# wbinfo -n user1-admin
>> S-1-5-21-3663128747-3839060396-3176805764-11824 SID_USER (1)
>> root at server:/# ldbedit -e /usr/bin/vim -H /var/lib/samba/private/idmap.ldb
>> objectsid=S-1-5-21-3663128747-3839060396-3176805764-11824
>> # 0 adds  0 modifies  0 deletes
>> root at server:/# wbinfo -n user2-admin
>> S-1-5-21-3663128747-3839060396-3176805764-11983 SID_USER (1)
>> root at server:/# ldbedit -e /usr/bin/vim -H /var/lib/samba/private/idmap.ldb
>> objectsid=S-1-5-21-3663128747-3839060396-3176805764-11983
>> no matching records - cannot edit
>> root at server:/# wbinfo -n user3-admin
>> S-1-5-21-3663128747-3839060396-3176805764-11981 SID_USER (1)
>> root at server:/# ldbedit -e /usr/bin/vim -H /var/lib/samba/private/idmap.ldb
>> objectsid=S-1-5-21-3663128747-3839060396-3176805764-11981
>> no matching records - cannot edit
>
> I'm not sure, if I understand, what you do there. You get the SID of an
> account and then edit idmap.ldb? But what do you do there when you say
>> # ldbedit -e /usr/bin/vim -H /var/lib/samba/private/idmap.ldb
>> objectsid=S-1-5-21-3663128747-3839060396-3176805764-11981
> Do you mean with that, that you search for that line in the editor and
> you can't find it?
>
>
>
> Regards,
> Marc
>
Hi, I think the OP is having a problem he isn't telling us and he is 
trying to find a reason for it. I do not think that it is anything to do 
with idmap.ldb, I have users that do not appear in idmap.ldb and do not 
have any problems.

Rowland