Samba の builtin account にまつわるエラー

[2007/12/19 17:03:49, 0] auth/auth_util.c:create_builtin_administrators(792)
  create_builtin_administrators: Failed to create Administrators
[2007/12/19 17:03:49, 0] auth/auth_util.c:create_builtin_users(758)
  create_builtin_users: Failed to create Users

こんな感じのエラーがやたらと出るんで(エラーは出るけど問題なく使える)ググったら,同じ現象([Samba] samba 3.0.23b - cannot create builtin accounts)の方がいらっしゃいました。

で,その返答([Samba] Re: samba 3.0.23b - cannot create builtin accounts)は……

> Hi,
> I installed a fresh server (SLES9 SP3) with Samba 
> 3.0.23b as an ADS member server.
> It all seems to work fine, but it doesn't create 
> the builtin accounts (only complains about it).

The Builtin group support has been moved to 'winbind
nested groups'.  You can still do manual group mappings
but it is better to use the "net sam" (or usrmgr.exe)
to manage them.

And you have to use a tdb or ldap idmap backend for it.
There is a limitation that prevents us from using idmap_rid
or idmap_ad at the moment.

winbind nested groups というオプションを指定したり net sam createbuiltin というコマンドを発行したりすればいいらしいんですが,idmap_rididmap_rid ではまだサポートされていないみたいです。ガーン。