[Samba] SID security

Robert Wooden
Mon, 05 Oct 2020 13:44:13 -0000

As the result of my own actions I have had to rebuild my DC's and member
server Samba version. It's my fault for upgrading to v4.13.0 too soon.

On W10, logged in as administrator, connected to the member server via
FileExplorer, the file permissions (via Properties tab) >> Security (tab
>>
Advanced >> shows the following permissions for the \\mbr04\data folder:

Creator Group
S-1-5-21-589789-1426474111-2143966843-500
S-1-5-21-589789-1426474111-2143966843-512
S-1-5-21-589789-1426474111-2143966843-513

Any member of "Domain Users" should be able to access this folder. The
mbr04 server shows this:

root at mbr04:~# wbinfo -s S-1-5-21-589789-1426474111-2143966843-500
failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup sid S-1-5-21-589789-1426474111-2143966843-500
root at mbr04:~# wbinfo -s S-1-5-21-589789-1426474111-2143966843-512
failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup sid S-1-5-21-589789-1426474111-2143966843-512
root at mbr04:~# wbinfo -s S-1-5-21-589789-1426474111-2143966843-513
failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup sid S-1-5-21-589789-1426474111-2143966843-513

I am not quite sure what needs to be adjusted.

I know above is not enough info, so, what info does anyone need to guide me?