[OT] Extracting SIDs and RIDs from NT server

[Luke Kenneth Casson Leighton]

rpcclient -S samba -U administrator -W domain -l log
Password: xxxx
smb: /> enumusers -g -u -a

gives you everything except the user passwords.

otherwise, work out how to set samba up as a BDC and then issue an
rpcclient "samsync" command, it will again list everything, including the
user passwords.

luke

On Tue, 24 Aug 1999, Kevin Myer wrote:

> Hello,
> 
> Sorry for the slightly off topic post but I'm in the last debugging leg of
> my NT to Linux/Samba/LDAP conversion process.  I need to extract the SIDs
> and RIDs from my NT server because somewhere, in one of my LDAP entries,
> I'm missing an rid.  Microsoft describes a mechanism for listing the
> entries at
> <http://support.microsoft.com/support/kb/articles/q177/0/77.asp>
> 
> However, I do not have the NT 4 Resource Kit and I'm a bit miffed that I
> have to shell out close to a hundred dollars to get the added
> functionality in an OS that should already be there.  Its my assumption
> that GETSID.EXE and GLOBAL.EXE are value-added Microsoft products and not
> some third party tool that they've included.  So barring buying the
> resource kit, does anyone know of a tool that will list the RIDs and SIDs
> on an NT server and output to a text file?  Can this be done with
> rpcclient or is there a third party NT utility for this function?
> 
> Thanks,
> 
> Kevin
> 
> 
> -- 
>      ~        Kevin M. Myer
>     . .       Network/System Administrator
>     /V\       ELANCO School District
>    // \
>   /(   )\
>    ^`~'^
> 
> 

<a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton    </a>
<a href="http://www.cb1.com/~lkcl"> Samba and Network Development   </a>
<a href="http://samba.org"        > Samba Web site                  </a>
<a href="http://www.iss.net"      > Internet Security Systems, Inc. </a>