On 30/09/2010 10:46, Harry Jede wrote:
Try to run the same search as Samba does:

ldapsearch -s sub -b "ou=Groups,dc=company,dc=com" 
"(&(objectClass=sambaGroupMapping)(|
(displayName=Developpeurs)(cn=Developpeurs)))"


ldapsearch -x -s sub -b 'ou=Groups,dc=company,dc=com' "(&(objectClass=sambaGroupMapping)(|(displayName=Developpeurs)(cn=Developpeurs)))"

dn: cn=Developpeurs,ou=Groups,dc=company,dc=com
objectClass: top
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: Developpeurs
gidNumber: 1005
sambaSID: S-1-5-21-1003513250-1319205365-1235820382-1015
sambaGroupType: 2
displayName: Developpeurs
description: Le groupe des programmeurs
memberUid: test
...
...

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1


Samba find this SID S-1-5-21-1003513250-1319205365-1235820382-1015 for your 
group, but
according to your ldif, the SID for Developpeurs is:
S-1-5-21-1003513250-1319205365-1235820382-101

So you may have a duplicate entry :-( .


Output is wrong, SID is S-1-5-21-1003513250-1319205365-1235820382-1015


> SAMBA : Version 3.3.2
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to