[Samba] Could not convert SID S-0-0, error is NT_STATUS_NONE_MAPPED

Rowland Penny rpenny at samba.org
Tue Aug 1 14:27:24 UTC 2023



On 01/08/2023 15:07, Carlos Jesus wrote:
> Hi Rowland, thanks for the reply
> 
> 
>      > [global]
>      >          realm = EUROHIDRA.LOCAL
> 
>     Is '.local' your real TLD ?
>     If it is, I suggest you turn off Bonjour and Avahi everywhere
> 
> Unfortunatly it is :(....
> 
> Bonjour and avahi are stopped and masked everywhere.

I wish Microsoft hadn't recommended using '.local', it just means that 
you cannot use Bonjour and Avahi. Microsoft has now realised this and 
they no longer recommend using it.

> 
>      >          workgroup = EUROHIDRA
>      >          netbios name = EHDC1
>      >          server role = active directory domain controller
>      > #       interfaces = lo br0
>      > #        bind interfaces only = Yes
>      >          idmap_ldb:use rfc2307 = yes
>      >          log level = 1  auth_json_audit:2@/var/log/samba/auth.log
>     sam:2@
>      > /var/log/samba/sam.log
>      >          log file = /var/log/samba/samba.log
>      >
>      >          server services = -dns
>      >          template shell = /bin/bash
>      >          template homedir = /home/%U
>      >          winbind use default domain = yes
> 
>     I suggest you remove the 'winbind use default domain' line, it does
>     nothing on a DC and, though unlikely, it could have something to do
>     with
>     your problem.
> 
> Will do. Will it interfere with PAM authentication?

No, all it really does it to remove the DOMAIN from user & group names 
and then only on Unix domain members.

Rowland




More information about the samba mailing list