[Samba] NT_STATUS_ACCESS_DENIED when issuing smbclient -k

Rowland penny rpenny at samba.org
Wed Feb 26 09:05:06 UTC 2020

On 26/02/2020 08:19, Marlon Franco wrote:
>   The primary group domain 
> sid(S-1-5-21-2449491038-845518472-943770720-512) does not match the 
> domain sid(S-1-5-21-3914098627-448258
> 429-2114528033) for abcd(S-1-22-1-12658)

All domain members must use the same SID, you can obtain this on the PDC 
with 'net getdomainsid'. You should then be able set the domain SID on 
Unix domain members with 'net setdomainsid 
S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz' , replacing the SID with the 
one you obtained on the PDC.


More information about the samba mailing list