[Samba] Change user SID on Samba 4.1

[Daniel Carrasco Marín]

Thanks!!, but I don't know how that can help me, because i'm planning to
change the domain, then the Domain SID must be different. Anyway is not
hard, i only have to move the user profile on domain change, but of course
is faster if i don't need to do it.

Greetings!!

2015-04-28 13:58 GMT+02:00 Rowland Penny <rowlandpenny at googlemail.com>:

> On 28/04/15 12:39, Daniel Carrasco Marín wrote:
>
>> I had troubles with classicupgrade and linux machines, and i'm creating a
>> new AD (for now works perfect). I want to keep the same SID of the old AD
>> to avoid to move all users profiles.
>>
>> Greetings!!
>> El 28/4/2015 1:07 p. m., "Andrew Bartlett" <abartlet at samba.org> escribió:
>>
>>  On Tue, 2015-04-28 at 11:27 +0200, Daniel Carrasco Marín wrote:
>>>
>>>> Hi, Is there any way to change the SID of an user on Samba 4.1?. I've
>>>>
>>> tried:
>>>
>>>> pdbedit -U newSID -u user
>>>> pdbedit -u user -U newSID
>>>> pdbedit --'user SID'=newSID -u user
>>>>
>>>> but it shows the user infor without change anything.
>>>>
>>> Changing a user's sid is a really bad idea, so in the AD DC (at least)
>>> is is made quite difficult.
>>>
>>> In particular, it is critical that it remain unique, and be removed from
>>> the RID pool.  When we do a classicupgrade, we take care to ensure all
>>> RID pools start above the users we import.  That is really the only time
>>> it is safe to force a RID.
>>>
>>> Why do you need to change it?
>>>
>>> --
>>> Andrew Bartlett                       http://samba.org/~abartlet/
>>> Authentication Developer, Samba Team  http://samba.org
>>> Samba Developer, Catalyst IT
>>> http://catalyst.net.nz/services/samba
>>>
>>>
>>>
>>>
> Never used it myself, but there is the provision option '--domain-sid=SID'
> . I assume that you can use this to set the domain SID when you provision a
> new domain.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba