[Samba] Samba v3 works with LDAP, but not Samba v4

[Rowland Penny]

On Wed, 17 Oct 2018 06:17:10 -0700
Emil Henry <hbcsc153 at gmail.com> wrote:

> HI Andrew!
> 
> > The user 'johndoe' seems to be rejected because it has the wrong
> > SID.
> >
> > It is the group in this case, we changed the rules to make them
> > stricter a while back, the primary group needs a group mapping entry
> > matching the SID of the standalone server.
> >
> 
> How would I match the Primary Group without breaking the existing
> Samba server that connects to this LDAP server? That samba server
> does not belong to me, and may stay at v3 for a while longer.
> 
> Thanks!

You cannot, it isn't the RID that is the problem, it is the domain SID

Rowland