[Samba] Samba on Debian 8; NT4 domain, win10

[Rowland Penny]

On Mon, 12 Dec 2016 09:04:18 +0100
"Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

> Am 2016-12-09 um 12:21 schrieb Rowland Penny via samba:
> > On Fri, 9 Dec 2016 11:11:56 +0100
> > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:
> > 
> >> From: "Stefan G. Weichinger via samba" <samba at lists.samba.org>
> >> To: samba at lists.samba.org
> >> Subject: Re: [Samba] Samba on Debian 8; NT4 domain, win10
> >> Date: Fri, 9 Dec 2016 11:11:56 +0100
> >> Reply-To: "Stefan G. Weichinger" <lists at xunil.at>
> >> Sender: "samba" <samba-bounces at lists.samba.org>
> >> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
> >>  Thunderbird/45.5.1
> >>
> >>
> >> I am doing another classic-upgrade for another customer.
> >>
> >> I get:
> >>
> >> Importing groups
> >> Could not add group name=Domain Admins ((68, "samldb: Account name
> >> (sAMAccountName) 'Domain Admins' already in use!"))
> >> Could not modify AD idmap entry for
> >> sid=S-1-5-21-2777655458-4002997014-749295002-1006, id=0,
> >> type=ID_TYPE_GID ((32, "Base-DN
> >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found"))
> >> Could not add posix attrs for AD entry for
> >> sid=S-1-5-21-2777655458-4002997014-749295002-1006, ((32, "Base-DN
> >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found"))
> >> Could not add group name=Domain Guests ((68, "samldb: Account name
> >> (sAMAccountName) 'Domain Guests' already in use!"))
> >> Could not modify AD idmap entry for
> >> sid=S-1-5-21-2777655458-4002997014-749295002-1008, id=65534,
> >> type=ID_TYPE_GID ((32, "Base-DN
> >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found"))
> >> Could not add posix attrs for AD entry for
> >> sid=S-1-5-21-2777655458-4002997014-749295002-1008, ((32, "Base-DN
> >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1008>' not found"))
> >> Could not add group name=Domain Users ((68, "samldb: Account name
> >> (sAMAccountName) 'Domain Users' already in use!"))
> >> Could not modify AD idmap entry for
> >> sid=S-1-5-21-2777655458-4002997014-749295002-1007, id=100,
> >> type=ID_TYPE_GID ((32, "Base-DN
> >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found"))
> >> Could not add posix attrs for AD entry for
> >> sid=S-1-5-21-2777655458-4002997014-749295002-1007, ((32, "Base-DN
> >> '<SID=S-1-5-21-2777655458-4002997014-749295002-1007>' not found"))
> >> Committing 'add groups' transaction to disk
> >>
> >>
> >> -- why "already in use" ?
> >>
> >>
> >>
> > 
> > It looks like you have the three groups in your old system, but the
> > upgrade will create the well known groups automatically, so your old
> > ones are being ignored because they are 'already in use'
> 
> understood.
> But the process stops after these warnings at adding a user:
> 
> Adding users
> Importing users
> User root has been kept in the directory, it should be removed in
> favour of the Administrator user
> Committing 'add users' transaction to disk
> Adding users to groups
> ERROR(<class 'samba.provision.ProvisioningError'>): uncaught
> exception - ProvisioningError: Could not add member
> 'S-1-5-21-2777655458-4002997014-749295002-1000' to group
> 'S-1-5-21-2777655458-4002997014-749295002-1006' as either group or
> user record doesn't exist: Base-DN
> '<SID=S-1-5-21-2777655458-4002997014-749295002-1006>' not found
>   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",
> line 175, in _run
>     return self.run(*args, **kwargs)
>   File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line
> 1452, in run
>     useeadb=eadb, dns_backend=dns_backend, use_ntvfs=use_ntvfs)
>   File "/usr/lib/python2.7/dist-packages/samba/upgrade.py", line 824,
> in upgrade_from_samba3
>     add_users_to_group(result.samdb, g, groupmembers[str(g.sid)],
> logger) File "/usr/lib/python2.7/dist-packages/samba/upgrade.py",
> line 317, in add_users_to_group
>     raise ProvisioningError("Could not add member '%s' to group '%s'
> as either group or user record doesn't exist: %s" % (member_sid,
> group.sid, emsg))
> 
> pls advise, thanks
> 
> 
> 

Who is 'S-1-5-21-2777655458-4002997014-749295002-1000' and what is
'S-1-5-21-2777655458-4002997014-749295002-1006' ?

Rowland