[Samba] Very strange: Samba is unable to access one of its own files

[Kees van Vloten]

Op 12-11-2024 om 10:52 schreef Rowland Penny via samba:
> On Tue, 12 Nov 2024 09:48:00 +0100
> Luis Peromarta via samba <samba at lists.samba.org> wrote:
>
>> It looks good to me, but also looks like winbind has not been started
>> by samba-ad-dc ?
> Morning Luis, Not had your coffee yet ? ;-)
>
> What about:
>
> Nov 11 17:05:18 ceres winbindd[32025]:   winbindd version 4.19.7
> started.
>
> It looks like nss isn't set up on the DC, so '3000000' isn't being
> mapped to 'BUILTIN\administrators'
That is easy enough, just run:

ldbsearch -H /var/lib/samba/private/idmap.ldb

If you have multiple DCs, you have to sync this file manually between 
them, check https://wiki.samba.org/index.php/SysVol_replication_(DFS-R)

- Kees

>
> It would be interesting to know who ID '3000021' is, because that is
> the user being denied access to sysvol.
>
> Rowland
>