[Samba] Samba on Debian 8; NT4 domain, win10

[Stefan G. Weichinger]

Am 2016-11-28 um 11:19 schrieb Rowland Penny via samba:
>>
>> Ignoring group memberships of 'pl13'
>> S-1-5-21-2940660672-4062535256-4144655499-2026: Unable to enumerate
>> group memberships, (-1073741724,No such user)
>>
>> ?


> If there are only a few of these, then they can be ignored, but if
> there are a lot, it needs sorting.

I'd like to sort it out, yes ... seems that more than the half of the
users are affected/listed.

> In English, this means 'what is to the right of 'passd backend =' in
> smb.conf
> 
> So, at this point, it might help if you posted your smb.conf.

will do asap, as soon as I have anonymized it (afternoon, appointments now).

For a quick glance these 2 results:

# testparm -sv | grep "passdb backend"

	passdb backend = tdbsam

# pdbedit -Lv pl13
Unix username:        pl13
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-2940660672-4062535256-4144655499-2026
Primary Group SID:    S-1-5-21-2940660672-4062535256-4144655499-513
Full Name:
Home Directory:       ""
HomeDir Drive:
Logon Script:
Profile Path:         ""
Domain:               SERVER
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          9223372036854775807 seconds since the Epoch
Kickoff time:         9223372036854775807 seconds since the Epoch
Password last set:    Mon, 19 Jul 2004 10:10:15 CEST
Password can change:  Mon, 19 Jul 2004 10:10:15 CEST
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF


as you see from the date in "Password last set" these users are old.
They were created long ago so maybe we have some issue related to the
fact that this started with samba-2.x or so ... ?