samba - Nov 2021 - Samba DC: Unable to convert first SID / NT_STATUS_INVALID_SID

On Sunday, November 7th, 2021 at 3:50 AM, Rowland Penny via samba <samba at
lists.samba.org> wrote:
> On Sun, 2021-11-07 at 04:31 +0000, Gyrfalcon via samba wrote:
>
> > I recently added a second domain controller to my environment,
> >
> > running Samba 4.14.18 (Fedora 34). I have had a single domain
> >
> > controller running Samba 4.9.4 (Fedora 29) for a few years, and it
> >
> > has been working quite well.
>
> Are you using the standard Fedora Samba packages ?
> If so, are you aware that, because they use MIT kerberos, they are
> marked as experimental ?
Yes.  Do you think that's relevant? Kerberos works fine.

On Sun, 2021-11-07 at 14:04 +0000, Gyrfalcon via samba
wrote:
> On Sunday, November 7th, 2021 at 3:50 AM, Rowland Penny via samba <
> samba at lists.samba.org> wrote:
> > On Sun, 2021-11-07 at 04:31 +0000, Gyrfalcon via samba wrote:
> > 
> > > I recently added a second domain controller to my environment,
> > > 
> > > running Samba 4.14.18 (Fedora 34). I have had a single domain
> > > 
> > > controller running Samba 4.9.4 (Fedora 29) for a few years, and
> > > it
> > > 
> > > has been working quite well.
> > 
> > Are you using the standard Fedora Samba packages ?
> > If so, are you aware that, because they use MIT kerberos, they are
> > marked as experimental ?
> 
> Yes.  Do you think that's relevant? Kerberos works fine.
It might be relevant, numerous things are know to not work correctly.
I would not use the fedora packages in production.

You say this is being caused by a Unix domain member, so can we see the
smb.conf from this ?

Rowland