Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[Samba] pdbedit: importing smbpasswd to tdbsam

202 views
Skip to first unread message

Simon Berg

unread,
Dec 18, 2003, 7:20:13 AM12/18/03
to
Hi there,

I'm trying to import a smbpasswd-file into a Samba 3.0 installation on Debian
Sarge using tdbsam as sole passdb backend.
Copying pdbedit's documentation I used

pdbedit -i smbpasswd:/root/smbpasswd.old

The error message returned was tdb_update_sam: Failing to store a SAM_ACCOUNT
for [foo] without a primary group RID

where foo is the username to be imported.
This message was repeated for every user in the smbpasswd-file. The users do not
yet exist in the tdbsam-database: pdbedit -L lists only two users each of which
does not occur in the smbpasswd-file.
The users do have existing linux-accounts, whith their primary group set to 'users'.

I also tried the pdbedit command stated above, adding a '-G 513' hoping for
being able to set the group RID to 'domain users'. 'net groupmap list' states
that the 'Domain Users' group, which I'm thinking to have a group RID of 513, is
mapped to the unixgroup 'users'.

Is there something I am getting wrong or is the import of smbpasswd to tdbsam
simply not possible? What can I do to make the import work?

Thanks for your help

Simon
Berg

--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba

Gerald (Jerry) Carter

unread,
Dec 18, 2003, 3:50:59 PM12/18/03
to
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Simon Berg wrote:
| Hi there,
|
| I'm trying to import a smbpasswd-file into a Samba 3.0
| installation on Debian Sarge using tdbsam as sole
| passdb backend. Copying pdbedit's documentation I used
|
| pdbedit -i smbpasswd:/root/smbpasswd.old
|
| The error message returned was tdb_update_sam: Failing to
| store a SAM_ACCOUNT for [foo] without a primary group RID

Please sen me the level 10 debug log and i'll take a look when I can.
Is this 3.0.0 or 3.0.1 ?

cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard ------------------------- http://www.hp.com
~ SAMBA Team ---------------------- http://www.samba.org
~ GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/4hLvIR7qMdg1EfYRArQaAJ0UT5Fw8ORVJnA5o3P1JZEoqAO+lQCgr3ei
8uraujIMS0fOSjLzyX6xjyw=
=v39o
-----END PGP SIGNATURE-----

Gerald (Jerry) Carter

unread,
Dec 18, 2003, 7:30:22 PM12/18/03
to
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Simon Berg wrote:

|> Simon Berg wrote:
|> | pdbedit -i smbpasswd:/root/smbpasswd.old
|> |
|> | The error message returned was tdb_update_sam: Failing to
|> | store a SAM_ACCOUNT for [foo] without a primary group RID

...
|
| Samba version information says it's "Version 3.0.0-Debian". Please let
| me know if you need more information.

The user sid and primary groiup SID are from different domains.
Did you setup a group mapping entry for 'Domai Users' in the
past and then generate a new domain sid?

setting user sid S-1-5-21-3982113065-1923505688-3729776395-3218
~ from rid 3218
pdb_set_group_sid: setting group sid
~ S-1-5-21-1793260918-3901658240-45857572-513

cheers, jerry


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/4kY8IR7qMdg1EfYRAmJIAJ9cg4LHNqw79NIb/aL0R4VUiNyvwQCfVqiJ
DUkMaczn7ojS6JQKfx4+EQM=
=ajEE

Simon Berg

unread,
Dec 18, 2003, 7:50:09 PM12/18/03
to
Gerald (Jerry) Carter wrote:

> Simon Berg wrote:
>
> |> Simon Berg wrote:
> |> | pdbedit -i smbpasswd:/root/smbpasswd.old
> |> |
> |> | The error message returned was tdb_update_sam: Failing to
> |> | store a SAM_ACCOUNT for [foo] without a primary group RID
> ...
> |
> | Samba version information says it's "Version 3.0.0-Debian". Please let
> | me know if you need more information.
>
> The user sid and primary groiup SID are from different domains.
> Did you setup a group mapping entry for 'Domai Users' in the
> past and then generate a new domain sid?
>
> setting user sid S-1-5-21-3982113065-1923505688-3729776395-3218
> ~ from rid 3218
> pdb_set_group_sid: setting group sid
> ~ S-1-5-21-1793260918-3901658240-45857572-513

Right. There was a mapping for another domain sid. When I deleted all
the mappings for that sid, pdbedit ran without complaining and all the
users were imported as expected.

Thanks a lot, Simon

0 new messages