[Samba] The group name could not be found

[Ian Coetzee]

On 18 November 2017 at 19:24, Ian Coetzee <samba at iancoetzee.za.net> wrote:

> On 18 November 2017 at 19:08, Ian Coetzee <samba at iancoetzee.za.net> wrote:
>
>> Hey guys,
>>
>> It's me again.
>>
>> Today I moved our NAS from our old 2000 domain to a new domain presided
>> over by two Samba 4.7.2 domain controllers.
>>
>> After the move I cant access the NAS at all from my Windows 7 test pc. I
>> keep getting an error that "The group name could not be found"
>>
>> I am at the end of my troubleshooting skills.
>>
>> I also moved the NAS' samba from sernet-samba 4.1 to the CentOS 6.9
>> packaged version 4.2.10.
>>
>> I also cleaned out the /var/lib/samba/* and rejoined the NAS the new
>> domain, still to no avail.
>>
>> The only thing I could pick out from the logs:
>> [2017/11/18 19:02:01.550190,  1, pid=7693, effective(0, 0), real(0, 0)]
>> ../librpc/ndr/ndr.c:439(ndr_print_function_debug)
>>        wbint_LookupName: struct wbint_LookupName
>>           out: struct wbint_LookupName
>>               type                     : *
>>                   type                     : SID_NAME_USE_NONE (0)
>>               sid                      : *
>>                   sid                      : S-0-0
>>               result                   : NT_STATUS_NONE_MAPPED
>>
>> However from one of the dc's:
>> $ wbinfo -s S-0-0
>> failed to call wbcStringToSid: WBC_ERR_INVALID_SID
>> Could not lookup sid S-0-0
>>
>> $ wbinfo -n ianc
>> S-1-5-21-2093009959-3443338361-3281248646-1407 SID_USER (1)
>>
>> $ wbinfo --user-domgroups=S-1-5-21-2093009959-3443338361-3281248646-1407
>> S-1-5-21-2093009959-3443338361-3281248646-1407
>> S-1-5-21-2093009959-3443338361-3281248646-513
>> S-1-5-21-2093009959-3443338361-3281248646-512
>> S-1-5-21-2093009959-3443338361-3281248646-572
>> S-1-5-21-2093009959-3443338361-3281248646-2189
>> S-1-5-21-2093009959-3443338361-3281248646-2208
>>
>> Anybody got another idea I could try, or somewhere I am overlooking?
>>
>> Kind regards
>>
>
>
> Hey guys,
>
> Some more information, from dc1:
> $ smbclient //nas/IPC$
> Enter SAMDOM\ianc's password:
> Try "help" to get a list of possible commands.
> smb: \> exit
>
> $ smbclient //nas/IT
> Enter SAMDOM\ianc's password:
> tree connect failed: NT_STATUS_NO_SUCH_GROUP
>
> I guess that means the problem is with my smb.conf.
>
> Kind regards
>

Hey guys,

Apologies for my incessant emails. I found my problem.

For future reference, somewhere between 4.1 and 4.2.10 samba doesn't like a
space in the names of the "valid users" directive.

Kind regards