samba - Nov 2005 - what is the SID of the domain administrator?

Does the domain administrator SID always end with -1000?

I.e., if the SID for the domain is:

S-1-2-33-4444444444-555555555-6666666666

does this mean that the domain administrator's SID would be:

S-1-2-33-4444444444-555555555-6666666666-1000

?

How can I get the SID number for any given user?


-- 
Tomek
http://wpkg.org
WPKG - software deployment and upgrades with Samba

Hi,

Please read the samba-howto-collection available on samba website.
The cahper about right and privileges talk about that.

-----------------------------------
St?phane PURNELLE                         stephane.purnelle@corman.be
Service Informatique       Corman S.A.           Tel : 00 32 087/342467

samba-bounces+stephane.purnelle=corman.be@lists.samba.org a ?crit sur 
16/11/2005 14:58:01 :
> Does the domain administrator SID always end with -1000?
> 
> I.e., if the SID for the domain is:
> 
> S-1-2-33-4444444444-555555555-6666666666
> 
> does this mean that the domain administrator's SID would be:
> 
> S-1-2-33-4444444444-555555555-6666666666-1000
> 
> ?
> 
> How can I get the SID number for any given user?
> 
> 
> -- 
> Tomek
> http://wpkg.org
> WPKG - software deployment and upgrades with Samba
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

> Does the domain administrator SID always end with -1000?
It should never be 1000
 
Please review
http://support.microsoft.com/default.aspx?scid=kb;en-us;243330
> How can I get the SID number for any given user?
You could divine the SID if you know the UID and the RID calculation,
presuming that samba has generated all of your user SIDs.  Otherwise, if
you're using LDAP you could either look in the LDAP object or use
smbldap-usershow.  If not, you can use pdbedit -L -v <username> which
should
give you all of the windows related info.

ps. Sorry for spamming you Tomasz, but I forgot to reply-to-all the first
time

Paul Gienger schrieb:
>>Does the domain administrator SID always end with -1000?
> 
> It should never be 1000
>  
> Please review
> http://support.microsoft.com/default.aspx?scid=kb;en-us;243330
Well, for me it's -1000 for two different Samba domains. Coincidence?

>>How can I get the SID number for any given user?
> 
> You could divine the SID if you know the UID and the RID calculation,
> presuming that samba has generated all of your user SIDs.  Otherwise, if
> you're using LDAP you could either look in the LDAP object or use
> smbldap-usershow.  If not, you can use pdbedit -L -v <username> which
should
> give you all of the windows related info.
smbldap-usershow was what I was looking for! :)


-- 
Tomek
http://wpkg.org
WPKG - software deployment and upgrades with Samba