[Samba] uncaught exception - Unable to get id for sid in classicupgrade

[Rowland Penny]

On Wed, 04 Apr 2018 15:13:09 +0700
Olivier via samba <samba at lists.samba.org> wrote:

> Hi,
> 
> When trying to upgrade from Samba 3.6.25 on FreeBSD 10.3-RELEASE-p17
> to Samba 4.7.6 on FreeBSD 11.1-RELEASE-p6, I receive an error:
> 
> # samba-tool domain classicupgrade --dbdir=/usr/local/etc/samba3/
>   --realm=samdom.example.com --dns-backend=BIND9_DLZ
>   /usr/local/etc/samba3/smb.conf
> 
> [...]
> Committing 'add users' transaction to disk
> Adding users to groups
> Committing 'add users to groups' transaction to disk
> Setting password for administrator
> Administrator password has been set to password of user 'root'
> idmapping sid_to_xid failed for id[0]=S-1-5-32-544:
> NT_STATUS_NONE_MAPPED idmapping sid_to_xid failed for
> id[0]=S-1-5-32-544: NT_STATUS_NONE_MAPPED idmapping sid_to_xid failed
> for id[0]=S-1-5-32-544: NT_STATUS_NONE_MAPPED idmapping sid_to_xid
> failed for id[0]=S-1-5-32-549: NT_STATUS_NONE_MAPPED idmapping
> sid_to_xid failed for id[0]=S-1-5-32-549: NT_STATUS_NONE_MAPPED
> idmapping sid_to_xid failed for id[0]=S-1-5-18: NT_STATUS_NONE_MAPPED
> idmapping sid_to_xid failed for id[0]=S-1-5-18: NT_STATUS_NONE_MAPPED
> idmapping sid_to_xid failed for id[0]=S-1-5-11: NT_STATUS_NONE_MAPPED
> idmapping sid_to_xid failed for id[0]=S-1-5-11: NT_STATUS_NONE_MAPPED
> [... the group of idmappin sid_to_xid is repeated several time ...]
> idmapping sid_to_xid failed for
> id[0]=S-1-5-21-1360262076-3929845164-3653621414-520:
> NT_STATUS_NONE_MAPPED idmapping sid_to_xid failed for
> id[0]=S-1-5-21-1360262076-3929845164-3653621414-520:
> NT_STATUS_NONE_MAPPED idmapping sid_to_xid failed for
> id[0]=S-1-5-21-1360262076-3929845164-3653621414-512:
> NT_STATUS_NONE_MAPPED ERROR(<class 'passdb.error'>): uncaught
> exception - Unable to get id for sid File
> "/usr/local/lib/python2.7/site-packages/samba/netcmd/__init__.py",
> line 176, in _run return self.run(*args, **kwargs) File
> "/usr/local/lib/python2.7/site-packages/samba/netcmd/domain.py", line
> 1589, in run useeadb=eadb, dns_backend=dns_backend,
> use_ntvfs=use_ntvfs) File
> "/usr/local/lib/python2.7/site-packages/samba/upgrade.py", line 854,
> in upgrade_from_samba3 result.names.domaindn, result.lp, use_ntvfs)
> File
> "/usr/local/lib/python2.7/site-packages/samba/provision/__init__.py",
> line 1615, in setsysvolacl set_gpos_acl(sysvol, dnsdomain, domainsid,
> domaindn, samdb, lp, use_ntvfs, passdb=s4_passdb) File
> "/usr/local/lib/python2.7/site-packages/samba/provision/__init__.py",
> line 1514, in set_gpos_acl passdb=passdb) File
> "/usr/local/lib/python2.7/site-packages/samba/provision/__init__.py",
> line 1477, in set_dir_acl setntacl(lp, path, acl, domsid,
> use_ntvfs=use_ntvfs, skip_invalid_chown=True, passdb=passdb,
> service=service) File
> "/usr/local/lib/python2.7/site-packages/samba/ntacls.py", line 112,
> in setntacl (owner_id, owner_type) = passdb.sid_to_id(sd.owner_sid)
> 
> I confirmed that I have no SID other than S-1-5-21-xxx, these
> S-1-5-32, S-1-5-18, etc. does not exist.
> 
> I also confimed that S-1-5-21-1360262076-3929845164-3653621414-520
> does not exist (it may have existed a long time ago).
> 
> S-1-5-21-1360262076-3929845164-3653621414-512 is the user "root".

It shouldn't be, the RID '512' is the 'Domain Admins' RID, try changing
this. I don't think this is your problem though, it is more likely to
be the next in line.

Rowland