Zentyal Forum, Linux Small Business Server

Zentyal Server => Directory and Authentication => Topic started by: caguiar on April 11, 2016, 05:15:01 pm

Title: Why permission contain user and group 3000002
Post by: caguiar on April 11, 2016, 05:15:01 pm

Can anybody explain why, when shares are created by Zentyal (v4.1), the directories created contain user and group 30000002?

For example:
getfacl Test/
# file: Test/
# owner: administrator
# group: administrators
user::rwx
user:administrator:rwx
user:3000002:rwx
group::rwx
group:adm:rwx
group:administrators:rwx
group:3000002:rwx
mask::rwx
other::---
default:user::rwx
default:user:administrator:rwx
default:user:3000002:rwx
default:group::---
default:group:adm:rwx
default:group:3000002:rwx
default:mask::rwx
default:other::---

Title: Re: Why permission contain user and group 3000002
Post by: julio on April 17, 2016, 01:02:30 pm

hi caguiar,

Code: [Select]

wbinfo --sid-to-name $(wbinfo --uid-to-sid 3000002)
NT AUTHORITY\SYSTEM 5

uid=30000002 -> sid=S-1-5-18 -> NT AUTHORITY\System -> Local System account:

Local System account. The name of this account is NT AUTHORITY\System.
It is a powerful account that has unrestricted access to all local system resources.
It is a member of the Windows Administrators group on the local computer.

more info about Local System accounts:
https://msdn.microsoft.com/de-de/library/windows/desktop/ms677973(v=vs.85).aspx (https://msdn.microsoft.com/de-de/library/windows/desktop/ms677973(v=vs.85).aspx)

Title: Re: Why permission contain user and group 3000002
Post by: caguiar on April 18, 2016, 02:00:24 pm

Julio,

Thank you for the info.

When I run that command in my Zentyal system I get

# wbinfo --sid-to-name $(wbinfo --uid-to-sid 3000002)
failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup sid S-1-5-18

Which means that that user does not exist.

Does that mean that there is something wrong with my Zentyal system? Or this is actually correct on Zentyal systems?