Unsolved
This post is more than 5 years old
5 Posts
0
1007
October 1st, 2012 01:00
Computer account group mapping "errors" are filling logs
Hi
Have a problem with
NT_Access_Credential::RequestFromSID:usr=domain\computer$ primary nt group not mapped, use unix primary
messages in datamovers, it's about all I can see with server_log.
We're using ad ldap and usermapper is disabled.
Anybody have any idea how to get rid of those?
There's no attribute for gid in computer account in ad ldap.
Any help appreciated.
And same thing with dart 6 and 7.
--
Jussi
No Events found!
Rainer_EMC
4 Operator
•
8.6K Posts
0
October 1st, 2012 02:00
I would suggest to troubleshoot with server_ldap and server_cifssupport
It would also make sense to look at the release notes for newer VNX OE to see if something changed / fixed
Did you always get these messages or what changed in your environment ?
UncleW
5 Posts
0
October 1st, 2012 02:00
Actually there is gidnumber in computer object.
--
Jussi
bergec
275 Posts
0
October 1st, 2012 02:00
The gid is probably "domain users" which is the default group for Windows users
He you such a group in Ldap database?
Claude
UncleW
5 Posts
0
October 1st, 2012 02:00
Gidnumber in computer object doesn't much help as in server_ldap:
Hosts: Class: Computer - Attributes: ipHostNumber
So any ideas anybody?
--
Jussi
UncleW
5 Posts
0
October 3rd, 2012 00:00
Ok.
Cifs acl.useUnixGid is 0
Usermapper is disabled
Server cifssupport returns
[x@nas-2-control ~]$ server_cifssupport vdm_name -secmap -list -name compname$ -domain domainname
vdm_name :
Error 0: vdm_name : Invalid error code [0 No mapping is available for SID]. (SID is correct)
What I think this is that because "domain computers" group doesn't have a gidNumber it's "reporting" for for that.
I think (though not sure) those log entries have been there for ages and it's the same with dart 6 and 7.
--
Jussi