Solution: "Could not update internal security to add machine to domain"

Luke Kenneth Casson Leighton lkcl at
Wed Apr 1 16:16:27 GMT 1998


you want to limit the number of entries after the S-1-5-21 to 3.  see


On Wed, 1 Apr 1998, Gerald Heinig wrote:

> Hi all,
> Thanks to a sample smb.conf from Johan Hedin I've now got NT domain
> logons on our Samba server.
> In case anyone comes across the following message from NT (translated
> from the german) whilst trying to connect the NT wks to the Samba
> server:
> Could not update internal security. Could not add MACHINE to DOMAIN
> The problem arose because I had got the domain sid wrong. I had
> mistakenly put
> domain sid = 1-5-21-111-222-333-444
>                       ^^^^
> instead of
> domain sid = S-1-5-21-111-222-333-444
>                      ^^^
> ie. I forgot the S- at the beginning of the sid.
> It might be worthwhile to put this in the FAQ. I don't know how many
> other people made the same mistake.
> cheers
> Gerald

<a href="mailto:lkcl at" > Luke Kenneth Casson Leighton  </a>
<a href=""> Samba and Network Development </a>
<a href=""       > Samba and Network Consultancy </a>

More information about the samba-ntdom mailing list