[Samba] Found multiple results for "tga":

[Edson Wolf]

Em 04/07/2023 01:34 PM, Rowland Penny via samba escreveu:
> On 04/07/2023 17:14, Edson Wolf via samba wrote:
>> I only have a tga user. But it says it has multiple entries.
>> 
>> ( ERROR: Failed to add members ['tga'] to group "backup" - Found 
>> multiple results for "tga": )
>> 
>> root at dc0:~# samba-tool group list |grep backup
>> lpcfg_do_global_parameter: WARNING: The "domain logons" option is 
>> deprecated
> 
> The obvious first question has to be, why do you have an NT4-style 
> domain parameter in a Samba AD DC smb.conf ?

I took it off, it's because I was wanting to use an automatic login 
script.

root at dc0:~# samba-tool group addmembers backup tga
ldb_wrap open of secrets.ldb
string_to_sid: SID tga is not in a valid format
ERROR: Failed to add members ['tga'] to group "backup" - Found multiple 
results for "tga":
CN=tga,CN=Users,DC=granmarmo,DC=intranet
CN=SERVER,CN=Computers,DC=granmarmo,DC=intranet

   File "/usr/lib/python3/dist-packages/samba/netcmd/group.py", line 478, 
in run
     samdb.add_remove_group_members(groupname, groupmembers,
   File "/usr/lib/python3/dist-packages/samba/samdb.py", line 425, in 
add_remove_group_members
     raise Exception('Found multiple results for "%s":\n%s' %


> 
>> ldb_wrap open of secrets.ldb
>> backup
>> 
>> root at dc0:~# samba-tool user list|grep tga
>> lpcfg_do_global_parameter: WARNING: The "domain logons" option is 
>> deprecated
>> ldb_wrap open of secrets.ldb
>> tga
>> 
>> root at dc0:~# samba-tool group addmembers backup tga
>> lpcfg_do_global_parameter: WARNING: The "domain logons" option is 
>> deprecated
>> ldb_wrap open of secrets.ldb
>> string_to_sid: SID tga is not in a valid format
>> ERROR: Failed to add members ['tga'] to group "backup" - Found 
>> multiple results for "tga":
>> CN=tga,CN=Users,DC=granmarmo,DC=intranet
>> CN=SERVER,CN=Computers,DC=empresa,DC=intranet
> 
> I do not know why this is happening and I also do not understand why it 
> appears that your users are in one dns domain (granmarmo.intranet) and 
> your computers are in another (empresa.intranet).
> Do you have any explanations for this ?
> I think it may be relevant.

It is not. It's because I don't want to show the domain, and I didn't 
rename it.

> 
> Rowland

-- 
A persistência é o caminho do êxito.
Charles Chaplin