samba - Oct 2014 - Administrators SID is invalid.

Hello,

I've got a samba 4.2 DC, which has worked well for about a month now. It
still works for all users except "Administrator".

If I login to a Windows box with the Administrator account, I can't
connect to any shares and clicking on a mapped drive returns the error
"The security ID structure is invalid".

Opening "Active Directory Users and Computers" on the Windows box
returns "The RPC server is unavailable".

Using "smbclient -L localhost -UAdministrator" on the GNU/Linux server
running samba I receife this error: "session setup failed:
NT_STATUS_INVALID_SID".

Is there a way to fix this without restoring the database from backup?

Kind regards,

mots

On 18/10/14 10:20, mots wrote:
> Hello,
>
> I've got a samba 4.2 DC, which has worked well for about a month now.
It
> still works for all users except "Administrator".
>
> If I login to a Windows box with the Administrator account, I can't
> connect to any shares and clicking on a mapped drive returns the error
> "The security ID structure is invalid".
>
> Opening "Active Directory Users and Computers" on the Windows box
> returns "The RPC server is unavailable".
>
> Using "smbclient -L localhost -UAdministrator" on the GNU/Linux
server
> running samba I receife this error: "session setup failed:
> NT_STATUS_INVALID_SID".
>
> Is there a way to fix this without restoring the database from backup?
>
> Kind regards,
>
> mots
possibly, have you done anything to the Administrator account ?

Also can you post the (sanitized) result of:

ldbsearch -H /var/lib/samba/private/sam.ldb cn=Administrator

You may have to alter '/var/lib/samba/private/sam.ldb' with the path to 
your sam.ldb

Rowland