[Samba] problems adding machines after upgrade - sambaSID attribute incomplete!

Pablo Chamorro C. pchamorro at ingeominas.gov.co
Sat Mar 18 21:50:39 GMT 2006

> #2 - what do you get from command... 'net getlocalsid'   ?

I get this:

SID for domain XXX is: S-1-5-21-2502698289-3639879065-7544774837

and the output of 'net getlocalsid DOMAIN' is:

SID for domain DOMAIN is: S-1-5-21-2502698289-3639879065

oops! it seems the error is here, XXX is our PDC name.  I kept a copy of 
the previous secrets.tdb.  Comparing, I can see two differences: the 
INFO\sandom_seed key changed and so does the SECRETS/SID/DOMAIN key! and I 
can see that both the DOMAIN and PDC SID were the same!.

Is it ok to change the SID for my DOMAIN as it was before in spite of the 
fact that that SID is the same PDC SID? or do I need to change the PDC 
SID too?

I appreciate very much your help.  We're gonna update our samba.schema 
and to review our smbldap-tools config.


> Craig


> #3 - do other commands work such as... pdbedit -Lv  ?

yes, this is one user record example:

Unix username:        user1
NT username:          user1
Account Flags:        [UX         ]
User SID:             S-1-5-21-2502698289-3639879065-7544774837-3010
Primary Group SID:    S-1-5-21-2502698289-3639879065-7544774837-513
Home Directory:       \\XXX\user1
HomeDir Drive:        H:
Logon Script:         xyz.bat
Profile Path:
Domain:               XYZ
Account desc:         User

Tel: +57 (2) 7314752/3222/2595 - Fax: +57 (2) 7310514
Carrera 31 #18-07 Parque Infantil - PO Box 1795 - Pasto

More information about the samba mailing list