[Samba] Account Unknown: SID not resolvable

[james.atwell365 at gmail.com]

Hello,

 

When viewing the Security tab of a user object I find 2 username/groups that
display their SID as opposed to their username with Account Unknown. I tried
to use 'wbinfo -s' with the SID but it's unable to return a result. Using a
well know SID works without issue.  

 

At one point this domain used 'idmap_ldb:use rfc2307 = yes' in the smb.conf
file when it was initially provisioned. It's no longer used on any DC and my
understanding by removing, GID's will not be resolvable and should have no
affect on SID's. 

 

To aid in my troubleshooting, can someone share what security usernames and
groups are created on a typical new user or group account? 

 

The two sid's I have with an unknown account name are as follows.

 

s-1-5-21-940051827-2291820289-3341758437-526

s-1-5-21-940051827-2291820289-3341758437-527

 

Are there other things I should be looking at resolve this concern?  Thank
you.