search for: security_groups

On 13/06/2019 17:17, Goetz, Patrick G via samba wrote: > On 6/13/19 10:48 AM, Alexey A Nikitin via samba wrote: >> According to the MS docs SID=('S-'+version+identifier authority value+domain or computer identifier+RID). The SIDs that don't contain RID are the special cases of Machine SID, Domain SID, Service SID, and some predefined universal well-known SIDs [1]. According to

...fa1f-4781-a126- de32d26c61b7>;<SID=S-1-5-21-1715567821-920026266-839522115- 4194>;CN=12312,OU=fsdf,OU=Office,DC=example,DC=ruchangetype: modifyadd: memberOfmemberOf: <GUID=272c834e-48ce-4002-8c95-c41781605d42>;<SID=S-1- 5-21-1715567821 -920026266-839522115- 1109>;CN=Commerce,OU=Security_Groups,OU=Services Account s,DC=example,DC=ru .......... added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0Adding 1 remote DNS records for SRV-SITE2- DC1.example.ruUsing binding ncacn_ip_tcp:srv- dc01.example.ru[,sign]Mapped to DCERPC endpoint 135added interface eth0 ip=10.2.1.15 bca...

No I'm join samba to Windows DC(srv-dc01), he not server RODC >> If they do, try pre-creating the new DC in AD. in Windows manager console AD may create only RODC, it does not suit me run samba-tool domain join example.ru DC --server=srv-dc01.example.ru --username=vas.lah --password=password --realm=EXAMPLE.RU --site=SITE2 Failed to fetch machine account password for EXAMPLE from

...fa1f-4781-a126- de32d26c61b7>;<SID=S-1-5-21-1715567821-920026266-839522115- 4194>;CN=12312,OU=fsdf,OU=Office,DC=example,DC=ruchangetype: modifyadd: memberOfmemberOf: <GUID=272c834e-48ce-4002-8c95-c41781605d42>;<SID=S-1- 5-21-1715567821 -920026266-839522115- 1109>;CN=Commerce,OU=Security_Groups,OU=Services Account s,DC=example,DC=ru ...... ....more than a thousand lines of messages .......... added interface eth0 ip=10.2.1.15 bcast=10.2.7.255 netmask=255.255.248.0Adding 1 remote DNS records for SRV-SITE2- DC1.example.ruUsing binding ncacn_ip_tcp:srv- dc01.example.ru[,sign]Mapped to DCER...