search for: getdomainsid

...tro: ClearOS 6.3 (RHEL-derived with a distro-specific web configuration tool for samba) I'm only about 90% sure it's version 6.3. Samba version: 3.6.10-1.v6 Intended use: NT4-style PDC for Windows XP clients Issue: My distro's "add machine script" uses the output of "net getdomainsid" to help populate the new machine account's sambaSID field in the ldap directory. Samba is already configured to use this information via the ldap passdb backend. Unfortunately, "net getdomainsid" is returning "Could not fetch local SID" instead of the PDC's domain...

...machine went live around 18 months ago. I believe this is the issue that's causing me to have problems migrating this PDC to a new machine. This is the output from the current PDC: phoenix:/ # net getlocalsid SID for domain PHOENIX is: S-1-5-21-3597458131-155160113-1223051555 phoenix:/ # net getdomainsid SID for domain PHOENIX is: S-1-5-21-3597458131-155160113-1223051555 SID for domain ADADOM is: S-1-5-21-3597458131-155160113-1223051555 New PDC: phoenix:~# net setlocalsid S-1-5-21-3597458131-155160113-1223051555 phoenix:~# net getlocalsid SID for domain PHOENIX is: S-1-5-21-3597458131-155160113-...

I have a domain with Samba 3 acting as PDC, and using LDAP (passdb backend = ldapsam). I now wanted to add a second Samba 3 machine as a simple file server. I get errors with getdomainsid and getlocalsid, so there is obviously still something wrong with my config. The PDC runs Samba 3.5.6 on Debian Squeeze. Sid queries return: # net getdomainsid SID for local machine MY_PDC_HOST is: S-1-5-21-4174501313-1202754954-1084205825 SID for domain MY_DOMAIN is: S-1-5-21-417450...

Louis is right, you should upgrade, but, in the meantime, try adding 'ntlm auth = yes' to your smb.conf, see if that helps. > > Also try running the following commands: > > net getlocalsid > > net getdomainsid > > Rowland > Yes they should upgrade, I totally agree. I've allready migrated samba3 domain to samba4 domain , but in this case the samba4 one is only a fileserver that was joined in a microsoft/AD domain. People from the samba3 domain used to access their home on it through bidire...

...e_local_nt_token) WARNING: Failed to create BUILTIN\Administrators group! Can Winbind allocate gids? [2013/07/02 15:40:51.811330, 2] auth/token_util.c:479(finalize_local_nt_token) WARNING: Failed to create BUILTIN\Users group! Can Winbind allocate gids? I guess the reason might be this: net getdomainsid SID for local machine M1 is: S-1-5-21-3981825222-1828954701-2606613544 SID for domain DOM1 is: S-1-5-21-2762780445-1763757571-3541238449 net getdomainsid SID for local machine M2 is: S-1-5-21-2913448378-2543514743-1508345481 SID for domain DOM1 is: S-1-5-21-2762780445-1763757571-3541238449 S...

...f. > > So while your joined domain members won't be happy (you will need to > rejoin), you can just change it. Just make sure the domain SID stays > the same, it should (because it will fallback to the 'machine sid' that > already has that value), but see > > net getdomainsid (to get the current one/check the new one) > net setdomainsid (if you need to reset it) > > I hope this helps! > > Andrew Bartlett > Hello Andrew, I have Upgrade my Domain from NT4 to AD. Domain SID is a different one. I try to set this to the new one. old pdc: net getdomains...

Dear samba experts, I did a classic upgrade from a Samba 3.6.14 samba NT4 DC to a Samba 4.18.2 AD-DC. It does not work and I just want to make sure that I have the correct understanding of our domain SID. On our old Samba server net getdomainsid shows: SID for local machine SERV00 is: S-1-5-21-1415314133-2460755331-2761616138 SID for domain NAV is: S-1-5-21-1415314133-2460755331-2761616138 But Classic Upgrade script says: ..... Unable to determine the DomainSID, can not enforce uniqueness constraint on local domainSIDs ..... INFO 2023-08...

I have been having a problem with 'net getdomainsid' on a machine that I set up to be a BDC. # net getdomainsid Could not fetch local SID tdbdump shows that there is no machine SID in secrets.db, so I'm thinking that I overlooked the step that creates a machine SID. What creates the machine SID and when? Also, is it the hostname or the net...

Hello, I try to setup a new test environment with Samba and LDAP but I could not get my domain SID. [root@ ~]# net getdomainsid SID for local machine LDAP-TEST is: S-1-5-21-1044143993-2427131616-1047417663 Could not fetch domain SID What I am do wrong or forget to do? Thanks, Bernard

...d the command "net setlocalsid" to no avail. To troubleshoot I have also stopped the smbd and nmbd services, but this did not help. Any help would be great! root at TheWiggle:~# net getlocalsid SID for domain THEWIGGLE is: S-1-5-21-748580849-194208185-3916830000 root at TheWiggle:~# net getdomainsid SID for local machine THEWIGGLE is: S-1-5-21-748580849-194208185-3916830000 SID for domain THISDOMAIN is: S-1-5-21-748580849-194208185-3916830000 root at TheWiggle:~# net setlocalsid S-1-5-21-33300351-1172445578-3061011111 root at TheWiggle:~# net getlocalsid SID for domain THEWIGGLE is: S-1-5-21...

Hello, i try to upgrade NT4 to AD. The NT4 domain has name foobar.example.com. i need to rename the domain to samdom.example.com. Is there a way to rename all entry in tdb before classicupgrade? tdbtool passdb.tdb list show something like hash=0 rec: hash=0 offset=0x00001dec next=0x00000000 .....

Hi. Today I upgraded samba from 3.0.34 to 3.4.4 without changing anything in smb.conf but with changing local and domain sid: old samba 1) net getdomainsid and getlocalsid new samba 2) net setdomainsid and setlocalsid to ones (both the same) from 1) after restarting samba I can't log into domain: XP says : domain controller unavailable ... I tried to rejoin domain - and I can ;) however again login fails with such message. Switching back to 3...

...map add ntgroup="Unix Admin" unixgroup=wheel But when I ssh'ed in as my user who is a member of the Unix Admin group and run `groups` I do not see myself as a member of the wheel group. I also can't alter files with wheel write permissions. After looking at the output of `net getdomainsid` and `net groupmap list` (by this time I had already deleted the Unix Admin -> wheel groupmap) I realized that the SIDs I see in the groupmap list correspond to the SID of the local machine and not the domain. I also see that Unix Admin is not even listed as a group when I check the groups on t...

I have the following setup: PDC: Samba 3.0.37 on Solaris 10 BDC1: Samba 3.0.37 on Solaris 10 BDC2: Samba 3.4.3 on Solaris 10 Samba 3.0.37 is the bundled version of Samba. Samba 3.4.3 is compiled from source. BDC2 is a recent addition to the network. All machine use LDAP as the backend for everything. They use winbind to handle a domain trust with another domain, but otherwise

...i just wonder if it matters to install it for the classicupgrade purpose, otherwise I'll just reinstall it on the new Samba 4 server Also I was pointing out that it was certainly SID related because each time I change workgroup, it just renew the domain SID; Before I change anything: # net getdomainsid SID for local machine AD is: S-1-5-21-673913221-4242741474-1014044216 SID for domain DOMAIN.LAN is: S-1-5-21-1905493267-1041818301-753029000 After I change the workgroup: # net getdomainsid SID for local machine AD is: S-1-5-21-673913221-4242741474-1014044216 SID for domain NEWDOMAIN is: S-1-5-21-...

Hello, I try to setup a new test environment with Samba and LDAP on CentOS 7 but I could not get my domain SID: [root@ ~]# net getdomainsid SID for local machine LDAP-TEST is: S-1-5-21-1044143993- 2427131616-1047417663 Could not fetch domain SID What I do wrong or forget to do? Thanks, Bernard

...t; self.outf.write(acl.as_sddl(domain_sid)+"\n") > > Or to put it in English, it tries to get the Domain SID from sam.ldb > and this doesn't exist on a member server. > And yet the member server "knows" what the Domain SID is (as shown by "net getdomainsid"). Isn't a file server exactly the place where setting ACEs using the sddl format would be the most useful? Can this limitation be removed or was it "by design"? It seems to me that with acl_xattr offering complete Windows ACLs the situation is now mature enough and demands a...

Hi, I'd like to migrate Samba 3.0.24-6etch10 PDC running on a Debian server to a new Ubuntu server. I plan to install Samba 3.0.28a-1ubuntu4.4 on the new server and then copy the files in /etc/samba and /var/lib/samba and copy the related Linux users in /etc/passwd and /etc/shadow. Will it work? Thanks in advance! ----- -- Kent Tong Wicket tutorials freely available at

...the following: Suppose that we have a server called "SMALLSERVER" working as a PDC for "SMALLDOMAIN**". When I enter "net getlocalsid" I get the following output: SID for domain SMALLSERVER is: S-1-5-21-xxxxxxxxx-xxxxxxxxx-xxxxxxxxx But when I enter "net getdomainsid" I get: SID for local machine SMALLSERVER is: S-1-5-21-xxxxxxxxx-xxxxxxxxx-xxxxxxxxx SID for domain SMALLDOMAIN is: S-1-5-21--xxxxxxxxx-xxxxxxxxx-xxxxxxxxx Is this a bug or is it by design? It is somewhat confusing. Shouldn't the output of "net getlocalsid" be "S...

...erver with an old WinME PC. That complained that the domain-server could not be found. So I stopped there, not wanting to screw up my WinXP-workstations. Did I miss something ? On the new machine I tried 'net getlocalsid', which failed : 'can't get localsid', same as 'net getdomainsid'. Where are those sid's stored ? Then I wanted to import the sid's from the old server so I reverted everything so the old machine is again the samba-server. This seems to work fine again, but 'net getlocalsid' or 'net getdomainsid' don't work here also ! Thanks f...