Configuration : Active directory Forest with MSSFU schema upgrade (only schema no SFU process) Solaris servers with PADL NSS LDAP and kerberos. All informations about users and groups are stored in Active Directory. User objectclass is in use for Windows and unix account. One account for the 2 OS. Same thing for group. In this configuration normaly no mapping is necessary, just let SMB and NSS doing the job. It is the case with 2.2.x versions. In v3.0.0 beta3 we first remark that SID is not resolved in properties security windows. See bug id 245. Second remark when we try to set ACL with windows interfaces and to add a group the following error appear in log.smbd [2003/08/05 14:16:34, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(182) startsmbfilepwent_internal: unable to open file /usr/local/samba3.0b3/private/smbpasswd. Error was No such file or directory [2003/08/05 14:16:34, 0] passdb/pdb_smbpasswd.c:smbpasswd_getsampwsid(1344) Unable to open passdb database. [2003/08/05 14:17:27, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-57989841-776561741- 682003330-9221 to uid or gid. [2003/08/05 14:17:27, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-57989841-776561741- 682003330-9221 to uid or gid. [2003/08/05 14:17:27, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-57989841-776561741- 682003330-9221 to uid or gid. [2003/08/05 14:17:27, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-57989841-776561741- 682003330-9221 to uid or gid. [2003/08/05 14:17:27, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-57989841-776561741- 682003330-9221 to uid or gid. [2003/08/05 14:17:27, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-57989841-776561741- 682003330-9221 to uid or gid. [2003/08/05 14:17:27, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-57989841-776561741- 682003330-9221 to uid or gid.
Please retest using the latest SAMBA_3_0 cvs. I've just fixed a related issue (bug 245). I think this will take care of you as well. If not, please reopen the bug.
Hi Jerry, I have the same issue with the RC2
I think we've fixed this one now (in 3.0.0)
originally reported against one of the 3.0.0rc[1-4] releases. Cleaning up non-production versions.
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.
database cleanup