Hey !
I finally managed to get rid of those messages "Failed to create
Administrators" and "Failed to create Users" in the logfile.
It seems there is a small bug with winbind when it is used with the
"idmap backend = rid:DOMAIN=100000-200000".
With such a configuration, winbind can't create any BUILTIN group
(Administrators, Users, Guests, Operators, ...), even if you try to
force it with :
net sam createbuiltingroup
What I've done is to reset conf.conf to the standard "idmap backend =
tdc", restart samba and winbind, issue the command :
net sam createbuiltingroup
successfully. Then you can see the mappings with "net groupmap list
verbose".
Last, set winbind back to "idmap backend = rid ..." like it was before.
Restart samba and winbind, and pooof ! Error messages are gone !!!
It took me a long time to discover that!
Regards
Yvan Broccard
Jacek Kowalski a écrit :
Hi,
Since I install Samba 3.0.23d on my Centos5 with kernel
2.6.18-8.1.10.el5 #1 SMP I've the following messages in my logfile:
Oct 3 16:45:22 smbd[6174]: [2007/10/03 16:45:22, 0]
auth/auth_util.c:create_builtin_administrators(785) Oct 3 16:45:22
smbd[6174]: create_builtin_administrators: Failed to create
Administrators Oct 3 16:45:22 smbd[6174]: [2007/10/03 16:45:22, 0]
auth/auth_util.c:create_builtin_users(751) Oct 3 16:45:22
smbd[6174]: create_builtin_users: Failed to create Users
Version of krb5 is 1.5-29
This is my smb.conf:
[global]
netbios name = SERVER
workgroup = DOMAIN
realm = DOMAIN.NET
security = ADS
password server = server.domain.net
winbind separator = +
allow trusted domains = No
idmap backend = idmap_rid:INFORNET=1000-65000
idmap uid = 1000-65000
idmap gid = 1000-65000
template shell = /bin/bash
winbind use default domain = Yes
winbind enum users = No
winbind enum groups = No
winbind nested groups = Yes
log file = /var/log/samba/%I.log
log level = 3
max log size = 500
smb ports = 139
guest account = guest
encrypt passwords = yes
username map = /etc/samba/smbusers
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no
[homes]
comment = Home Directories
browseable = no
writable = yes
create mask = 664
directory mask = 0775
[source1]
path = /home/source1
public = yes
valid users = @DOMAIN+group1
read list = @DOMAIN+group1
write list = @DOMAIN+group1
force group = group1
writable = yes
printable = no
browseable = yes
create mask = 0665
force directory mode = 0775
guest ok = yes
Anybody knows how to fix it?
Regards
Jaco
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
