[CentOS] samba3x PDC and Win XP

Wed Aug 1 13:51:07 UTC 2012
Paul R. Ganci <ganci at nurdog.com>

On 08/01/2012 04:06 AM, Leonard den Ottolander wrote:
> Hello Paul,
> On Wed, 2012-08-01 at 01:39 -0600, Paul R. Ganci wrote:
>>           logon path = \\%L\profile\%u\%m
>>           logon home = \\%L\%u
>> Perhaps the single backslashes being escapes for the following percent
>> signs? Try doubling the backslashes, possibly the first two in the path
>> as well.
Thanks for the idea ... I gave this a try but it is not the issue. The 
path in the error message was different but no cigar. I am positive that 
the syntax specified above is correct for the /etc/samba/smb.conf file 
as it is documented this way all over the web. It really looks like 
there is a mapping missing somewhere. For example I am seeing:

2012/08/01 07:03:05.412614,  3] smbd/service.c:807(make_connection_snum)
   Connect path is '/mnt/home/profile' for service [profile]
[2012/08/01 07:03:05.412655,  3] smbd/vfs.c:97(vfs_init_default)
   Initialising default vfs hooks
[2012/08/01 07:03:05.412684,  3] smbd/vfs.c:122(vfs_init_custom)
   Initialising custom vfs hooks from [/[Default VFS]/]
[2012/08/01 07:03:05.412806,  3] lib/util_sid.c:228(string_to_sid)
   string_to_sid: Sid @smbusers does not start with 'S-'.

I do have some linux groups smbusers, smbadmins, smbguests defined in 


and mapped the group like so:

 > net groupmap list
Domain Users (S-1-5-21-2436759526-4149905533-814844971-513) -> smbusers
Administrators (S-1-5-32-544) -> 100000
Domain Guests (S-1-5-21-2436759526-4149905533-814844971-514) -> smbguests
Domain Admins (S-1-5-21-2436759526-4149905533-814844971-512) -> smbadmins
Users (S-1-5-32-545) -> 100001

I even tried adding this /etc/samba/smb.conf entry:

#  Unix users can map to different SMB User names
         username map = /etc/samba/smbusers

with /etc/samba/smbusers containing:

 > cat smbusers
# Unix_name = SMB_name1 SMB_name2 ...
root = Administrator administrator admin
nobody = guest pcguest smbguest
snichols = snichols
ganci = ganci
visitor = visitor

None of it works.

Paul (ganci at nurdog.com)