[Samba] Samba on Debian 8; NT4 domain, win10

[Stefan G. Weichinger]

Am 2016-12-09 um 12:21 schrieb Rowland Penny via samba:
> On Fri, 9 Dec 2016 11:11:56 +0100
> "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:
> 
>> From: "Stefan G. Weichinger via samba" <samba at lists.samba.org>
>> To: samba at lists.samba.org
>> Subject: Re: [Samba] Samba on Debian 8; NT4 domain, win10
>> Date: Fri, 9 Dec 2016 11:11:56 +0100
>> Reply-To: "Stefan G. Weichinger" <lists at xunil.at>
>> Sender: "samba" <samba-bounces at lists.samba.org>
>> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
>>  Thunderbird/45.5.1
>>
>>
>> I am doing another classic-upgrade for another customer.
>>
>> I get:
>>
>> Importing groups
>> Could not add group name=Domain Admins ((68, "samldb: Account name
>> (sAMAccountName) 'Domain Admins' already in use!"))
>> Could not modify AD idmap entry for
>> sid=S-1-5-21-2777655458-4002997014-749295002-1006, id=0,
>> type=ID_TYPE_GID ((32, "Base-DN
>> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found"))
>> Could not add posix attrs for AD entry for
>> sid=S-1-5-21-2777655458-4002997014-749295002-1006, ((32, "Base-DN
>> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found"))
>> Could not add group name=Domain Guests ((68, "samldb: Account name
>> (sAMAccountName) 'Domain Guests' already in use!"))
>> Could not modify AD idmap entry for
>> sid=S-1-5-21-2777655458-4002997014-749295002-1008, id=65534,
>> type=ID_TYPE_GID ((32, "Base-DN
>> '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found"))
>> Could not add posix attrs for AD entry for
>> sid=S-1-5-21-2777655458-4002997014-749295002-1008, ((32, "Base-DN
>> '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found"))
>> Could not add group name=Domain Users ((68, "samldb: Account name
>> (sAMAccountName) 'Domain Users' already in use!"))
>> Could not modify AD idmap entry for
>> sid=S-1-5-21-2777655458-4002997014-749295002-1007, id=100,
>> type=ID_TYPE_GID ((32, "Base-DN
>> '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found"))
>> Could not add posix attrs for AD entry for
>> sid=S-1-5-21-2777655458-4002997014-749295002-1007, ((32, "Base-DN
>> '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found"))
>> Committing 'add groups' transaction to disk
>>
>>
>> -- why "already in use" ?
>>
>>
>>
> 
> It looks like you have the three groups in your old system, but the
> upgrade will create the well known groups automatically, so your old
> ones are being ignored because they are 'already in use'

understood.
But the process stops after these warnings at adding a user:

Adding users
Importing users
User root has been kept in the directory, it should be removed in favour
of the Administrator user
Committing 'add users' transaction to disk
Adding users to groups
ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception -
ProvisioningError: Could not add member
'S-1-5-21-2777655458-4002997014-749295002-1000' to group
'S-1-5-21-2777655458-4002997014-749295002-1006' as either group or user
record doesn't exist: Base-DN
'<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line
175, in _run
    return self.run(*args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line
1452, in run
    useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
  File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 824, in
upgrade_from_samba3
    add_users_to_group(result.samdb, g, groupmembers[str(g.sid)], logger)
  File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 317, in
add_users_to_group
    raise ProvisioningError("Could not add member '%s' to group '%s' as
either group or user record doesn't exist: %s" % (member_sid, group.sid,
emsg))

pls advise, thanks