[Samba] Samba v3 works with LDAP, but not Samba v4

[Andrew Bartlett]

On Wed, 2018-10-17 at 09:01 +0100, Rowland Penny via samba wrote:
> On Tue, 16 Oct 2018 20:49:06 -0700
> Emil Henry <hbcsc153 at gmail.com> wrote:
> 
> > Hi Andrew!
> > 
> > Really appreciate the clarification and help. Understood about the
> > password. I have attached the log.127.0.0.1 with the "correct"
> > password being used. I do see entries in that log for the Primary
> > Group of 0. Not sure where I would need to make the change. Any
> > guidance would be really appreciated. Have been fighting this for the
> > last 3 weeks. :-(
> > 
> 
> Hi Andrew, if it walks like a duck and quacks like a duck, it very
> probably is a duck ;-)
> 
> Even though testparm says it is a 'standalone server', it seems to be
> acting like a PDC:

Pretty much, because there isn't really much difference between a PDC
and a single standalone server, both use a local passdb.


> The user 'johndoe' seems to be rejected because it has the wrong SID.

It is the group in this case, we changed the rules to make them
stricter a while back, the primary group needs a group mapping entry
matching the SID of the standalone server.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba