[Samba] Fwd: samba-gpupdate nsswitch error

Rowland Penny rpenny at samba.org
Tue Mar 14 10:25:48 UTC 2023



On 14/03/2023 10:16, Kees van Vloten via samba wrote:
>>
> I use rfc2307 and I remember I had to assign uid/gid to computer objects 
> at one point to get rid of different but also similar kind of errors 
> (check ml 14-04-2022), these were the messages:
> 
> smbd[15370]: [2022/04/14 14:32:56.556685,  0] 
> ../../source3/auth/auth_util.c:1928(check_account)
> smbd[15370]:   check_account: Failed to convert SID 
> S-1-5-21-3042323961-424325435-1432587418-1234 to a UID 
> (dom_user[SAMDOM\computer01$])
> 
> 
> 
> 

That is a different message, Samba was trying to map a SID to a uid and 
failed because there wasn't a uid to map it to, adding a uidNumber 
attribute fixed that.
What I am saying is, if getent can find a uid or gid, it will return it, 
but there doesn't seem to be code to map a SID to return the uid to 
getent. If you think about it, why would there be code to do this, SID's 
are Windows things and until fairly recently, there was no reason for a 
Unix computer to be a user, in fact, is there a reason now, do GPO's 
require this ?

Rowland




More information about the samba mailing list