[root@bart samba]# pdbedit -U S-1-5-21-3189138339-1730592290-4215248117-500 -u mj -r -d 7
INFO: Current debug levels:
  all: 7
  tdb: 7
  printdrivers: 7
  lanman: 7
  smb: 7
  rpc_parse: 7
  rpc_srv: 7
  rpc_cli: 7
  passdb: 7
  sam: 7
  auth: 7
  winbind: 7
  vfs: 7
  idmap: 7
  quota: 7
  acls: 7
  locking: 7
  msdfs: 7
  dmapi: 7
  registry: 7
  scavenger: 7
  dns: 7
  ldb: 7
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
  all: 7
  tdb: 7
  printdrivers: 7
  lanman: 7
  smb: 7
  rpc_parse: 7
  rpc_srv: 7
  rpc_cli: 7
  passdb: 7
  sam: 7
  auth: 7
  winbind: 7
  vfs: 7
  idmap: 7
  quota: 7
  acls: 7
  locking: 7
  msdfs: 7
  dmapi: 7
  registry: 7
  scavenger: 7
  dns: 7
  ldb: 7
Processing section "[global]"
doing parameter bind interfaces only = yes
doing parameter enable privileges = yes
WARNING: The "enable privileges" option is deprecated
doing parameter workgroup = BOLLS
doing parameter netbios name = BART
doing parameter realm = BOLLS.LAN
doing parameter kerberos method = dedicated keytab
doing parameter dedicated keytab file = FILE:/etc/samba/samba.keytab
doing parameter create krb5 conf = no
doing parameter security = user
doing parameter domain master = yes
doing parameter domain logons = yes
doing parameter log level = 3
doing parameter max log size = 100000
doing parameter log file = /var/log/samba/log.%m
doing parameter passdb backend = ipasam:ldaps://lisa.bolls.lan
doing parameter disable spoolss = yes
doing parameter ldapsam:trusted = yes
doing parameter ldap ssl = off
doing parameter ldap suffix = dc=bolls,dc=lan
doing parameter ldap user suffix = cn=users,cn=accounts
doing parameter ldap group suffix = cn=groups,cn=accounts
doing parameter ldap machine suffix = cn=computers,cn=accounts
doing parameter rpc_server:epmapper = external
doing parameter rpc_server:lsarpc = external
doing parameter rpc_server:lsass = external
doing parameter rpc_server:lsasd = external
doing parameter rpc_server:samr = external
doing parameter rpc_server:netlogon = external
doing parameter rpc_server:tcpip = yes
doing parameter rpc_daemon:epmd = fork
doing parameter rpc_daemon:lsasd = fork
doing parameter logon path = \\%L\Profiles\%U
doing parameter logon drive = H:
doing parameter logon home = \\%L\%U
pm_process() returned Yes
lp_servicenumber: couldn't find homes
Netbios name list:-
my_netbios_names[0]="BART"
Attempting to find a passdb backend to match ipasam:ldaps://lisa.bolls.lan (ipasam)
No builtin backend found, trying to load plugin
Probing module 'ipasam'
Probing module 'ipasam': Trying to load from /usr/lib64/samba/pdb/ipasam.so
Module 'ipasam' loaded
Attempting to register passdb backend ipasam
Successfully added passdb backend 'ipasam'
Found pdb backend ipasam
smbldap_search_ext: base => [], filter => [(objectclass=*)], scope => [0]
The connection to the LDAP server was closed
smbldap_open_connection: connection opened
ldap_connect_system: successful connection to the LDAP server
The LDAP server is successfully connected
smbldap_search_ext: base => [dc=bolls,dc=lan], filter => [objectclass=domainRelatedObject], scope => [0]
smbldap_search_ext: base => [dc=bolls,dc=lan], filter => [objectclass=krbrealmcontainer], scope => [2]
smbldap_search_ext: base => [dc=bolls,dc=lan], filter => [objectClass=ipaNTDomainAttrs], scope => [2]
smbldap_search_ext: base => [cn=Default SMB Group,cn=groups,cn=accounts,dc=bolls,dc=lan], filter => [objectClass=*], scope => [0]
check lock order 1 for /var/lib/samba/private/secrets.tdb
release lock order 1 for /var/lib/samba/private/secrets.tdb
check lock order 1 for /var/lib/samba/private/secrets.tdb
release lock order 1 for /var/lib/samba/private/secrets.tdb
check lock order 1 for /var/lib/samba/private/secrets.tdb
release lock order 1 for /var/lib/samba/private/secrets.tdb
smbldap_search_ext: base => [cn=BOLLS.LAN,cn=kerberos,dc=bolls,dc=lan], filter => [objectclass=krbrealmcontainer], scope => [0]
pdb_init_ipasam: support for pdb_enum_upn_suffixes enabled for domain bolls.lan
pdb backend ipasam:ldaps://lisa.bolls.lan has a valid init
smbldap_search_ext: base => [dc=bolls,dc=lan], filter => [(&(objectClass=ipaNTUserAttrs)(uid=mj))], scope => [2]
init_sam_from_ldap: Entry found for user: mj
Finding user mj
Trying _Get_Pwnam(), username as lowercase is mj
Get_Pwnam_internals did find user [mj]!
Opening cache file at /var/lib/samba/gencache.tdb
Opening cache file at /var/lib/samba/gencache_notrans.tdb
smbldap_search_ext: base => [dc=bolls,dc=lan], filter => [(&(objectClass=ipaNTUserAttrs)(|(ipaNTSecurityIdentifier=S-1-5-21-3189138339-1730592290-4215248117-1006)))], scope => [2]
smbldap_search_ext: base => [dc=bolls,dc=lan], filter => [(&(objectClass=ipaNTGroupAttrs)(|(ipaNTSecurityIdentifier=S-1-5-21-3189138339-1730592290-4215248117-1006)))], scope => [2]
Unable to modify entry!