[Samba] Issue with samba SID

TAKAHASHI Motonobu monyo at monyo.com
Wed Mar 16 10:39:02 MDT 2011

From: Moisés_Barba_Pérez <mbarperoi at gmail.com>
Date: Wed, 16 Mar 2011 09:32:19 +0100

> > 2011/3/15 TAKAHASHI Motonobu <monyo at monyo.com>
> > If you use smbldap-tools, the SID for users and groups are generated
> > by smbldap-tools with the way which you know, (2 * id) + 1000/1001.
> >
> > But the SID for computers are generated by Samba itself. Samba
> > generates (any) SID in sequentially from 1000.

> Is it possible to configure SIDs genertion for users and computers in the
> old style (2*id) + 1000???

I do not exactly understand what is your "old style".

If your "old style" means Samba 2.2 style, set "passdb backend =
ldapsam_compat" and related settings may be what you want.

ldapsam_compat means that Samba uses old LDAP schema same as Samba 2.2. 

If ldapsam_compat (or smbpasswd) is set as passdb backend, it can not
store the next RID and Samba simply generates SID "algorithmic rid base" +
id * 2 + (+1 if group). That is what you want.

TAKAHASHI Motonobu <monyo at monyo.com>

More information about the samba mailing list