[Samba] trust secret location in WinXP

Csillag Tamás cstamas at digitus.itk.ppke.hu
Mon Mar 15 21:29:34 GMT 2004


On 03/15, Clint Sharp wrote:
> On Mon, 15 Mar 2004, Csillag [iso-8859-2] Tamás wrote:
> 
[...]
> 
> The machine's sid only changes if you run a program to change it, 
> otherwise it will inherit the SID of the ghosted machine.  We use NewSID 
> from Sysinternals (http://www.sysinternals.com/), but GhostWalker which 
> comes from ghost or several other packages exist to do the same thing.  
> Having multiple machines with the same SID on your domain will cause very 
> unusual problems :).
Can you give me some examples?
I am really interested.
I use ldap as a backend, here is a machine account.

I do not undestand how can it work in the domain if the machines sid
does not changes accordingly (on a particular machine).

dn: uid=sucker$,ou=machines,dc=itk,dc=ppke
uid: sucker$
sambaSID: S-1-5-21-1628963623-43893491-1455040052-181004
sambaPrimaryGroupSID: S-1-5-21-1628963623-43893491-1455040052-181005
displayName: sucker
sambaPwdCanChange: 1063609369
sambaPwdMustChange: 2147483647
sambaLMPassword: 6B77AF665E0B4665A9A5F808568734A4
sambaNTPassword: 6B77AF665E0B4665A9A5F808568734A4
sambaPwdLastSet: 1063609369
sambaAcctFlags: [W          ]
objectClass: sambaSamAccount
objectClass: account
structuralObjectClass: account
entryUUID: c251de74-6c14-1027-8621-f081c87e167e
creatorsName: cn=admin,dc=itk,dc=ppke
createTimestamp: 20030826132718Z
entryCSN: 2003091507:02:27Z#0x0001#0#0000
modifiersName: cn=admin,dc=itk,dc=ppke
modifyTimestamp: 20030915070227Z

(This is a fake entry)

Any ideas?

-- 
cstamas


More information about the samba mailing list