[Samba] Fwd: Re: Duplicate xidNumbers

[Rowland Penny]

On Fri, 13 Jan 2017 11:36:26 -0500
Bob Thomas via samba <samba at lists.samba.org> wrote:

> Rowland,
> 
> Thank you for the quick response.
> 
> I have just run net cache flush no change in problem.  I have dumped
> the idmap.ldp using ldbsearch -H /var/lib/samba/private/idmap.ldb >
> idmap.txt and did some sorting, that is how I found the duplicates.
> 
> 
> On 1/13/2017 11:09 AM, Rowland Penny via samba wrote:
> > samba-tool ntacl
> > >sysvolreset
> 
> 

OK, idmap.ldb contains records like this:

dn: CN=S-1-5-21-1768301897-3342589593-1064908849-502
cn: S-1-5-21-1768301897-3342589593-1064908849-502
objectClass: sidMap
objectSid: S-1-5-21-1768301897-3342589593-1064908849-502
type: ID_TYPE_BOTH
xidNumber: 3000045
distinguishedName: CN=S-1-5-21-1768301897-3342589593-1064908849-502

As you can see, it maps a user/groups SID to an xidNumber. So I see no
problem with just using the xidNumber for another SID when you have
duplicates, but I would try this instead. Stop Samba, backup idmap.ldb
and then delete both duplicates and any other records that don't match
the above sample, then restart Samba, this should recreate the records,
but with new xidNumbers.

Run 'net cache flush' and sysvolreset again.

Rowland