[Samba] How can I change the localSID for a SAMBA Server?

[Rowland penny]

On 15/12/15 21:25, Byron Bogaert wrote:
> Our Global Configuration is as follows:
>
> #======================= Global Settings =======================
>
> [global]
>    workgroup = WIKIMEDIA
>    netbios name = THEWIGGLE
> server string = %h server (Samba, Ubuntu)
>    security = user
>    dns proxy = no
>
> #### Debugging/Accounting ####
>   log level = 2
>    log file = /var/log/samba/log.%m
>    max log size = 1000
>    syslog = 0
>    panic action = /usr/share/samba/panic-action %d
>
> ####### Authentication #######
>    server role = standalone server
>    passdb backend = ldapsam:ldap://somehost.wikimedia.org 
> <http://somehost.wikimedia.org/>
>    ldap suffix = dc=wikimedia,dc=org
>    ldap user suffix = ou=people
>    ldap group suffix = ou=groups
>    ldap machinesuffix = ou=computers
>    ldap idmap suffix = ou=Idmap
>    ldap ssl = start tls
>    ldap admin dn = <Administrative dn in ldap>
>    ldap password sync = yes
>    obey pam restrictions = yes
>    passwd program = /usr/bin/passwd %u
>    passwd chat = *Enter\snew\s*\spassword:* %n\n 
> *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
>    pam password change = yes
>    map to guest = bad user
>
> ############ Misc ############
>
>    usershare allow guests = yes
>
>
>

I think (baring in mind that it has been quite sometime since I had 
anything to do with samba & ldap) you do not need to change the SID on 
your standalone server if you are using ldap from another machine just 
for authentication.

You will need to setup nlscd to use the info from the ldap server.

Rowland