[Samba] SID security

[Rowland penny]

On 05/10/2020 15:06, Robert Wooden wrote:
> After sending the email I realized that I did not mention that while 
> rebuilding the OS, I kept the "old" /srv/samba files. Which in turn 
> kept the old permission settings. I think (could be wrong) that 
> keeping the old SID are now different from the new SID's created while 
> rebuilding to v4.12.6.
>
> To answer your DC question:
> root at dc1:~#  wbinfo -s S-1-5-21-589789-1426474111-2143966843-500
> failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
> Could not lookup sid S-1-5-21-589789-1426474111-2143966843-500
> root at dc1:~#  wbinfo -s S-1-5-21-589789-1426474111-2143966843-512
> failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
> Could not lookup sid S-1-5-21-589789-1426474111-2143966843-512
> root at dc1:~#  wbinfo -s S-1-5-21-589789-1426474111-2143966843-513
> failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
> Could not lookup sid S-1-5-21-589789-1426474111-2143966843-513
>
You possibly have major problems

How did you rebuild the OS ?

Did you provision a new domain ?

If so, you will now have a new domain SID and anything from the old 
domain that contains a SID will have a different SID

Rowland