[Samba] Samba on Debian 8; NT4 domain, win10

[Stefan G. Weichinger]

Am 2016-12-09 um 12:22 schrieb Rowland Penny via samba:
> On Fri, 9 Dec 2016 11:37:44 +0100
> "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:
>> I think this is my problem (on the old host/pdc):
>>
>> # net groupmap list
>> Domain Admins (S-1-5-21-2777655458-4002997014-749295002-1006) -> root
>> Domain Guests (S-1-5-21-2777655458-4002997014-749295002-1008) ->
>> nobody Domain Users (S-1-5-21-2777655458-4002997014-749295002-1007)
>> -> users
> 
> Looks like it, try removing the mappings

removing the mappings did not change much

at first it can't add the groups as they are "already in use"
then it can't add the users to groups as the target groups don't exist

*scratches head*

-->

Importing idmap database
Cannot open idmap database, Ignoring: [Errno 2] No such file or directory
Adding groups
Importing groups
Could not add group name=Domain Admins ((68, "samldb: Account name
(sAMAccountName) 'Domain Admins' already in use!"))
Could not modify AD idmap entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1006, id=0,
type=ID_TYPE_GID ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found"))
Could not add posix attrs for AD entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1006, ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found"))
Could not add group name=Domain Guests ((68, "samldb: Account name
(sAMAccountName) 'Domain Guests' already in use!"))
Could not modify AD idmap entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1008, id=65534,
type=ID_TYPE_GID ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found"))
Could not add posix attrs for AD entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1008, ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found"))
Could not add group name=Domain Users ((68, "samldb: Account name
(sAMAccountName) 'Domain Users' already in use!"))
Could not modify AD idmap entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1007, id=100,
type=ID_TYPE_GID ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found"))
Could not add posix attrs for AD entry for
sid=S-1-5-21-2777655458-4002997014-749295002-1007, ((32, "Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found"))
Committing 'add groups' transaction to disk
Adding users
Importing users
User root has been kept in the directory, it should be removed in favour
of the Administrator user
Committing 'add users' transaction to disk
Adding users to groups
ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception -
ProvisioningError: Could not add member
'S-1-5-21-2777655458-4002997014-749295002-1000' to group
'S-1-5-21-2777655458-4002997014-749295002-1006' as either group or user
record doesn't exist: Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line
175, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line
1452, in run
    useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
  File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 824, in
upgrade_from_samba3
    add_users_to_group(result.samdb, g, groupmembers[str(g.sid)], logger)
  File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 317, in
add_users_to_group
    raise ProvisioningError("Could not add member '%s' to group '%s' as
either group or user record doesn't exist: %s" % (member_sid, group.sid,
emsg))
root at dc01:~# net groupmap list
root at dc01:~#