Primary group for user root is a User and not a domain group

D

dillchen

Grünschnabel
Hallo Foren-Gemeinde,

ich habe ein kleines Problem mit Samba..

Komischerweise taucht in allen Freigaben (oberster Ebene) ein Benutzer auf, auch in den Home-Verzeichnissen anderer Nutzer..
Der Benutzer hat auch die ID S-1-5-21-4018482476-3246111116-2873159145-1008 welche als Primary group von root angebene ist..

Habe das im LDAP aber mit ldapmodify geändert, openldap durchgestartet, die samba durchgestartet - dennoch ändert sich nichts..
und pdbedit gibt auch immer noch die Fehlermeldung "init_sam_from_ldap: Entry found for user: root
Primary group S-1-5-21-4018482476-3246111116-2873159145-1008 for user root is a User and not a domain group
"...

Jetzt frage ich mich, woher pdbedit die Infos bezieht bzw. wo ich es noch ändern muss?!

________________________________________________________________________________________________________________________

root@asterix: pdbedit -Lv -u root | more
WARNING: The "printer admin" option is deprecated
smbldap_search_domain_info: Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=SAW-LEIPZIG))]
smbldap_open_connection: connection opened
ldap_connect_system: successful connection to the LDAP server
init_sam_from_ldap: Entry found for user: root
Primary group S-1-5-21-4018482476-3246111116-2873159145-1008 for user root is a User and not a domain group
Unix username: root
NT username: root
Account Flags: [U ]
User SID: S-1-5-21-4018482476-3246111116-2873159145-1000
Primary Group SID: S-1-5-21-4018482476-3246111116-2873159145-513
Full Name: root
Home Directory: \\samba\root
HomeDir Drive:
Logon Script: mountGruppen.cmd
Profile Path: \\samba\profiles\root\UNKNOWN
Domain: SAW-LEIPZIG
Account desc:
Workstations:
Munged dial:
Logon time: 0
Logoff time: never
Kickoff time: never
Password last set: Fr, 18 Nov 2011 10:16:39 CET
Password can change: Fr, 18 Nov 2011 10:16:39 CET
Password must change: never
Last bad password : 0
Bad password count : 0
Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
saw-leipzig.de
~
root@asterix:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

# extended LDIF
#
# LDAPv3
# base <dc=saw-leipzig,dc=de> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# saw-leipzig.de
dn: dc=saw-leipzig,dc=de
objectClass: top
objectClass: dcObject
objectClass: organization
o: SAW-LEIPZIG
dc: saw-leipzig

# Manager, saw-leipzig.de
dn: cn=Manager,dc=saw-leipzig,dc=de
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: Manager
description: LDAP administrator

# sambaadmin, saw-leipzig.de
dn: cn=sambaadmin,dc=saw-leipzig,dc=de
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: sambaadmin
description: Samba user to connect to LDAP

# users, saw-leipzig.de
dn: ou=users,dc=saw-leipzig,dc=de
objectClass: top
objectClass: organizationalUnit
ou: users

# groups, saw-leipzig.de
dn: ou=groups,dc=saw-leipzig,dc=de
objectClass: top
objectClass: organizationalUnit
ou: groups

# idmap, saw-leipzig.de
dn: ou=idmap,dc=saw-leipzig,dc=de
objectClass: top
objectClass: organizationalUnit
objectClass: sambaUnixIdPool
ou: idmap
uidNumber: 10040
gidNumber: 12011

# computers, saw-leipzig.de
dn: ou=computers,dc=saw-leipzig,dc=de
objectClass: top
objectClass: organizationalUnit
ou: computers

# SAW-LEIPZIG, saw-leipzig.de
dn: sambaDomainName=SAW-LEIPZIG,dc=saw-leipzig,dc=de
sambaDomainName: SAW-LEIPZIG
sambaSID: S-1-5-21-4018482476-3246111116-2873159145
sambaAlgorithmicRidBase: 1000
objectClass: sambaDomain
sambaNextUserRid: 1000
sambaMinPwdLength: 5
sambaPwdHistoryLength: 0
sambaLogonToChgPwd: 0
sambaMaxPwdAge: -1
sambaMinPwdAge: 0
sambaLockoutDuration: 30
sambaLockoutObservationWindow: 30
sambaLockoutThreshold: 0
sambaForceLogoff: -1
sambaRefuseMachinePwdChange: 0
sambaNextRid: 1055

# domusers, groups, saw-leipzig.de
dn: cn=domusers,ou=groups,dc=saw-leipzig,dc=de
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: domusers
displayName: Domain Users
gidNumber: 10000
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-513
sambaGroupType: 2

# domadmins, groups, saw-leipzig.de
dn: cn=domadmins,ou=groups,dc=saw-leipzig,dc=de
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: domadmins
displayName: Domain Admins
gidNumber: 10001
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-512
sambaGroupType: 2

# nobody, users, saw-leipzig.de
dn: uid=nobody,ou=users,dc=saw-leipzig,dc=de
objectClass: account
objectClass: posixAccount
objectClass: sambaSamAccount
uid: nobody
cn: nobody
displayName: nobody
uidNumber: 65534
gidNumber: 65534
homeDirectory: /nonexistent
loginShell: /bin/sh
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-501
sambaAcctFlags: [DU ]

# domguests, groups, saw-leipzig.de
dn: cn=domguests,ou=groups,dc=saw-leipzig,dc=de
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: domguests
displayName: Domain Guests
gidNumber: 65534
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-514
sambaGroupType: 2

# S-1-5-32-544, idmap, saw-leipzig.de
dn: sambaSID=S-1-5-32-544,ou=idmap,dc=saw-leipzig,dc=de
objectClass: sambaIdmapEntry
objectClass: sambaSidEntry
objectClass: sambaGroupMapping
gidNumber: 10002
sambaSID: S-1-5-32-544
sambaGroupType: 5

# S-1-5-32-545, idmap, saw-leipzig.de
dn: sambaSID=S-1-5-32-545,ou=idmap,dc=saw-leipzig,dc=de
objectClass: sambaIdmapEntry
objectClass: sambaSidEntry
objectClass: sambaGroupMapping
gidNumber: 10003
sambaSID: S-1-5-32-545
sambaGroupType: 5

# S-1-5-32-546, idmap, saw-leipzig.de
dn: sambaSID=S-1-5-32-546,ou=idmap,dc=saw-leipzig,dc=de
objectClass: sambaIdmapEntry
objectClass: sambaSidEntry
objectClass: sambaGroupMapping
gidNumber: 10004
sambaSID: S-1-5-32-546
sambaGroupType: 5

# root, groups, saw-leipzig.de
dn: cn=root,ou=groups,dc=saw-leipzig,dc=de
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: root
gidNumber: 0
sambaGroupType: 2
displayName:: VW5peCBHcm91cCByb290IA==
description: Unix Group root
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-512

# root, users, saw-leipzig.de
dn: uid=root,ou=users,dc=saw-leipzig,dc=de
objectClass: account
objectClass: posixAccount
objectClass: sambaSamAccount
uid: root
cn: root
uidNumber: 0
homeDirectory: /root
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-1000
displayName: root
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
00000000
sambaAcctFlags: [U ]
gidNumber: 0
sambaPwdLastSet: 1321607799

# administrator, users, saw-leipzig.de
dn: uid=administrator,ou=users,dc=saw-leipzig,dc=de
uid: administrator
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-1001
objectClass: sambaSamAccount
objectClass: account
objectClass: posixAccount
cn: administrator
uidNumber: 10001
gidNumber: 10000
homeDirectory: /home/SAW-LEIPZIG/administrator
loginShell: /bin/false
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
00000000
sambaAcctFlags: [U ]
sambaPwdLastSet: 1321607800

# dill, users, saw-leipzig.de
dn: uid=dill,ou=users,dc=saw-leipzig,dc=de
uid: dill
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-1002
objectClass: sambaSamAccount
objectClass: account
objectClass: posixAccount
cn: dill
uidNumber: 10002
gidNumber: 10000
homeDirectory: /home/SAW-LEIPZIG/dill
loginShell: /bin/false
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
00000000
sambaPwdLastSet: 1321523975
sambaAcctFlags: [U ]

# zerling, users, saw-leipzig.de
dn: uid=zerling,ou=users,dc=saw-leipzig,dc=de
uid: zerling
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-1003
objectClass: sambaSamAccount
objectClass: account
objectClass: posixAccount
cn: zerling
uidNumber: 10003
gidNumber: 10000
homeDirectory: /home/SAW-LEIPZIG/zerling
loginShell: /bin/false
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
00000000
sambaPwdLastSet: 1321523975
sambaAcctFlags: [U ]

# schlott, users, saw-leipzig.de
dn: uid=schlott,ou=users,dc=saw-leipzig,dc=de
uid: schlott
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-1004
objectClass: sambaSamAccount
objectClass: account
objectClass: posixAccount
cn: schlott
uidNumber: 10004
gidNumber: 10000
homeDirectory: /home/SAW-LEIPZIG/schlott
loginShell: /bin/false
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
00000000
sambaPwdLastSet: 1321523975
sambaAcctFlags: [U ]

# otto, users, saw-leipzig.de
dn: uid=otto,ou=users,dc=saw-leipzig,dc=de
uid: otto
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-1005
objectClass: sambaSamAccount
objectClass: account
objectClass: posixAccount
cn: otto
uidNumber: 10005
gidNumber: 10000
homeDirectory: /home/SAW-LEIPZIG/otto
loginShell: /bin/false
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
00000000
sambaPwdLastSet: 1321523975
sambaAcctFlags: [U ]

# ecker, users, saw-leipzig.de
dn: uid=ecker,ou=users,dc=saw-leipzig,dc=de
uid: ecker
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-1006
objectClass: sambaSamAccount
objectClass: account
objectClass: posixAccount
cn: ecker
uidNumber: 10006
gidNumber: 10000
homeDirectory: /home/SAW-LEIPZIG/ecker
loginShell: /bin/false
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
00000000
sambaPwdLastSet: 1321523975
sambaAcctFlags: [U ]

# kotthoff, users, saw-leipzig.de
dn: uid=kotthoff,ou=users,dc=saw-leipzig,dc=de
uid: kotthoff
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-1007
objectClass: sambaSamAccount
objectClass: account
objectClass: posixAccount
cn: kotthoff
uidNumber: 10007
gidNumber: 10000
homeDirectory: /home/SAW-LEIPZIG/kotthoff
loginShell: /bin/false
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
00000000
sambaPwdLastSet: 1321523975
sambaAcctFlags: [U ]

# ruenzel, users, saw-leipzig.de
dn: uid=ruenzel,ou=users,dc=saw-leipzig,dc=de
uid: ruenzel
sambaSID: S-1-5-21-4018482476-3246111116-2873159145-1008
objectClass: sambaSamAccount
objectClass: account
objectClass: posixAccount
cn: ruenzel
uidNumber: 10008
gidNumber: 10000
homeDirectory: /home/SAW-LEIPZIG/ruenzel
loginShell: /bin/false
sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000
00000000
sambaPwdLastSet: 1321523975
sambaAcctFlags: [U ]
 
Habe den Fehler gefunden, die Gruppe root brauchte eine eigene Kennung "SambaSID" S-1-5-21-4018482476-3246111116-2873159145-511!
Seitdem taucht auch der Benutzer nicht mehr in den Homeverzeichnissen der anderen auf!
 

Ähnliche Themen

Samba 3.6.25 - OpenLDAP Setup

Verschlüsselung mit LDAP-Authentifizierung funktioniert nicht

Samba 4 Gast Zugang unter Ubuntu funktioniert nicht

Server will nicht in die Domain

Windbind Fehlermeldungen

Zurück
Oben