[Samba] net rpc vampire - cannot login to migrated computer accounts

[Thomas Bork]

Christoph Peus wrote:

> after "net rpc vampire" migration:
> uidNumber: 22693
> sambaSID: S-1-5-21-1139895982-289624505-398547282-4370

> after the maschine rejoined the domain:
> uidNumber: 22694
> sambaSID: S-1-5-21-1139895982-289624505-398547282-46388

Hi Christoph, nice to read you :)

What shows
testparm -sv 2>/dev/null | grep 'algorithmic rid'
?

Think it will look like 'algorithmic rid base = 1000'
because 22694 * 2 + 1000 = 46388

You have to find the point in the migration process, where the new 
sambaSID is calculated. Your migrated sambaSID is not correct.

Example from my machine (no ldap):

# testparm -sv 2>/dev/null | grep 'algorithmic rid'
         algorithmic rid base = 1000

vmeis # id xp\$
uid=2005(xp$) gid=777(machines) Gruppen=777(machines)
vmeis # pdbedit -Lv xp$ | grep 'User SID'
User SID:             S-1-5-21-2616608439-745089445-1077948534-5010

2005 * 2 + 1000 = 5010


der tom