Re: [Samba] new user can't log

2009-12-21 Thread Leonardo Carneiro
Hi guys. I'm still stuck with that user that can't logon. This is what i got with some commands: fileserver:~# net groupmap list Domain Admins (S-1-5-21-874179082-3571801642-3889913597-512) - Domain Admins Domain Users (S-1-5-21-874179082-3571801642-3889913597-513) - Domain

Re: [Samba] new user can't log

2009-12-21 Thread Zoolook
2009/12/21 Leonardo Carneiro lscarne...@veltrac.com.br: Hi guys. I'm still stuck with that user that can't logon. This is what i got with some commands: was that the user with SID S-1-5-21-4161212321-1980848047-2820993626-3468 ? his SID doesn't match your domain. -- To unsubscribe from

Re: [Samba] new user can't log

2009-12-21 Thread Leonardo Carneiro
It's strange. I've found that this problem isn't with this particular user, but with every new user that i create. How can i make the smbldap-useradd to create the users with the right sid? *Leonardo de Souza Carneiro* *Veltrac - Tecnologia em Logística.* lscarne...@veltrac.com.br

Re: [Samba] new user can't log

2009-12-21 Thread Zoolook
2009/12/21 Leonardo Carneiro lscarne...@veltrac.com.br: It's strange. I've found that this problem isn't with this particular user, but with every new user that i create. How can i make the smbldap-useradd to create the users with the right sid? Check your smbldap config. I'm sure the SID

Re: [Samba] new user can't log

2009-12-21 Thread Leonardo Carneiro
Hi Zoolook and others. Indeed, the smbldap.conf was with the wrong sid. i've changed, but i do not have a terminal server to test remote. once i get in there i'll test, but i'm pretty confident that this was the problem. tks a lot! *Leonardo de Souza Carneiro* *Veltrac - Tecnologia em

Re: [Samba] new user can't log

2009-12-21 Thread David Whitney
Check the default group (and any others, for that matter) associated with the users that cannot logon. If Samba sees a group with a SID not from its own domain, it will detect a clash and fail the logon. Mind you, this is an issue in your database that is causing new users in *your* domain to be

[Samba] new user can't log

2009-12-18 Thread Leonardo Carneiro
Hello everyone. I was having a problem with my Samba PDC with LDAP backend. The command 'net getlocalsid' gaves me the message Got too many (2) domain info entries for domain [domain]. I logged im my ldap server, and saw that i have the following entries: dn:

Re: [Samba] new user can't log

2009-12-18 Thread Zoolook
2009/12/18 Leonardo Carneiro lscarne...@veltrac.com.br:   [2009/12/18 16:47:29,  2] auth/auth.c:check_ntlm_password(308)     check_ntlm_password:  authentication for user [dsribeiro] -   [dsribeiro] - [dsribeiro] succeeded   [2009/12/18 16:47:29,  1]  

[Samba] new user can't log

2009-12-18 Thread David Whitney
Unless I've blown my memory on Windows internals, each user's SID is comprised of the domain's SID, then a self-refential RID portion. That means a user from the domain DOMINIOS should NOT have what amounts to a prefix that looks as though it came from a different domain. But unless I'm mistaken,

Re: [Samba] new user can't log

2009-12-18 Thread Leonardo Carneiro
The database from ldap was a copy from another domain, that existed in another network. i've done a slapcat in the old domain and did a slapadd in this new one (both domain have the same name). But this happened about 2 years ago. After a samba and ldap upgrade via apt-get, the duplicated