[Samba] Can't access samba because "session setup failed: NT_STATUS_INVALID_SID"

Junior Oliveira emersonjr.eng at gmail.com
Sun Sep 30 18:28:42 UTC 2018

Thanks Rowland,

I didn't think i was doing all of this in an outdated way (it really makes
sense, as much of the tutorials i've followed come from before 2010 and
there's barely no  recent tutorials regarding these issues).

So i'm gonna follow your suggestion. However, how can i deal with the LDAP
server? This base is big and it's a mandatory feature i need to implement
on this Samba 4, let the users log in on Samba 4 using it's credentials
from OpenLDAP server. How could i accomplish this now?

Thanks in advance again.

Em dom, 30 de set de 2018 às 17:17, Rowland Penny via samba <
samba at lists.samba.org> escreveu:

> On Sun, 30 Sep 2018 16:32:38 +0000
> Junior Oliveira via samba <samba at lists.samba.org> wrote:
> >  I have an instance of samba 4 where users gonna authenticate on it
> > through a OpenLDAP server. The user from LDAP are already configured
> > with samba credentials. The issue is that they are set with an SID
> > different from the one of my machine with samba 4, i guess it's
> > because there was an old samba 3 in use when these users were
> > created. When i create a new user with "smbldap-tools", it logs in
> > the samba correctly, but the old users don't. Anyways, all the users
> > either old or new need to use this samba 4 now. Should i change the
> > SID of my samba instance to the old set on the old users in order to
> > settle this problem? What would be the best solution for this?
> >
> > Thanks in advance.
> I would suggest you stop using old outdated ways of doing things ;-)
> As far as I can see 'smbldap-tools' is dead, there doesn't seem to be a
> home webpage anywhere and as such it is now unmaintained. It only
> needs a perl update to break it.
> We now move to Windows, Microsoft seems to be trying to stop NT4-style
> domains working, this may be by accident, or on purpose, but it is
> happening.
> Can I suggest you upgrade to a Samba AD domain, it is easier to
> maintain and works with current (and past) versions of Windows.
> Rowland
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list