[Samba] Samba on Debian 8; NT4 domain, win10

Rowland Penny rpenny at samba.org
Mon Nov 28 10:19:20 UTC 2016

On Mon, 28 Nov 2016 10:54:55 +0100
"Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

> Am 2016-11-28 um 10:27 schrieb Rowland Penny via samba:
> > Have you read this:
> > 
> > https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_Domain_to_Samba_AD_%28Classic_Upgrade%29
> > 
> > Particularly this part:
> > 
> > https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_Domain_to_Samba_AD_%28Classic_Upgrade%29#Upgrading_on_a_new_server
> Yes, as you can see from my subdir-tree ... exactly as the Wiki.
> (btw "wins.dat" is not mentioned in the wiki but was needed here)
> > Accepted practice is to test first in a test domain and then do it
> > again in production, once you know exactly what needs fixing in your
> > old setup (hopefully nothing)
> > 
> > The upgrade should read from ldap and the Samba databases,
> > not /etc/passwd & /etc/group
> As there is no LDAP on the old server and no passwd/group needed:
> what am I missing that is leading to:
> Ignoring group memberships of 'pl13'
> S-1-5-21-2940660672-4062535256-4144655499-2026: Unable to enumerate
> group memberships, (-1073741724,No such user)
> ?
> Thanks, Stefan

OK, that error message is coming from here:

            group_memberships = s3db.enum_group_memberships(user);
            for group in group_memberships:
                if str(group) in groupmembers:
                    if user.user_sid not in groupmembers[str(group)]:
                    groupmembers[str(group)] = [user.user_sid];
        except passdb.error, e:
            logger.warn("Ignoring group memberships of '%s' %s: %s",
            username, user.user_sid, e)

and it seems that it cannot find the user 'pl13'

If there are only a few of these, then they can be ignored, but if
there are a lot, it needs sorting.

If you examine this line:

            group_memberships = s3db.enum_group_memberships(user);

it uses 's3db' to get the group memberships of the user, 's3db' is
obtained here:

    def get_sam_db(self):
        return passdb.PDB(self.lp.get('passdb backend'))

In English, this means 'what is to the right of 'passd backend =' in

So, at this point, it might help if you posted your smb.conf.


More information about the samba mailing list