[Samba] R: check_account: Failed to convert SID S-1-5-21-822543001-694776171-4236178688-132794 to a UID

Rowland Penny rpenny at samba.org
Mon Feb 27 11:50:31 UTC 2023



On 27/02/2023 11:35, Corrado Ravinetto via samba wrote:
> Hi Rowland
> RID '132795' is a computer account and this a migration from an old samba 3 pdc installation.
> This is only a warning or should i do something before have trouble ??

You can safely ignore the warning, but you really should fix the ranges, 
they must not overlap and yours do not just overlap, one is totally 
inside the other.

Your setup is one reason why I think it is probably better to set up a 
new AD domain, rather than upgrading an NT4-style domain.

As you have uidNumbers that start at '500' (I take it that they do start 
at 500) and you have set the end range to '999999', you are going to 
have to start the default '*' range well above that, say 
'2000000-2002000'. You will still be unable to have any local Unix users 
(the ones in /etc/passwd), so you will have to enable root.

Rowland



More information about the samba mailing list