[Samba] How are user and group SID's generated?

[Rowland penny]

On 27/03/2020 13:57, Dan Stevenson via samba wrote:
> Greetings,
>
> Hoping someone can shed some light on this. I've been searching for 
> over a week and cannot find information on how Samba generates SID's 
> from Unix UID's and GID's.
>
> I keep running into situations where after adding a new user to my 
> CentOS server all other users are suddenly prevented from accessing 
> shares that have a group ACL assigned.
>
> I finally figured out that it is because Samba will assign an SID to 
> the new user that is identical to an existing group SID.
>
> For example I have a group named management with an SID of 
> S-1-5-21-XXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-1026 (X's are my server's ID)
>
> Then I add a user and Samba generates the exact same SID for the new 
> user. Now when I check the folder properties from Windows I can see 
> that instead of the group name showing in the security tab like it 
> used to it now shows the name of the new user.
>
> I do not have a Windows domain, just a simple workgroup.
>
> I am hoping there is a config file somewhere that I can use to tell 
> Samba to use different SID ranges for user and groups so there will 
> never be duplicates?
>
>
How exactly are you running Samba ?

I think it might help if you post your smb.conf file.

Rowland