[Samba] $DOMAINSID != $MACHINE_SID ???
abartlet at samba.org
Mon Feb 9 20:26:17 GMT 2004
On Tue, 2004-02-10 at 04:26, Michael Gasch wrote:
> hi at all
> just for my understanding:
> in a samba 3.0 domain (samba 3.0 as pdc with ldap), i thought each
> machine, joining the domain, gets the SID
> $DOMAINSID-RID - whether in LDAP or the machine itself
> but when i check the SID of a machine account (for example locally on a
> windows xp client), it shows up a different SID (checked with psgetsid),
> but it can join/connect/browse the domain like a charme ???
> how is this possible?
> needn't be the machine SID the same as the DOMAIN SID (of course
> including the RID) ???
> or holds the machine another (local) SID??
Each machine is it's own domain, and has it's own domain sid. It's
trust account on the DC has a different SID, on the server's domain.
Andrew Bartlett abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team abartlet at samba.org
Student Network Administrator, Hawker College abartlet at hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20040210/785bf2f0/attachment.bin
More information about the samba