[Samba] -513 = 100 in tdb mode ?

[Rowland Penny]

On Fri, 5 Apr 2024 16:21:33 +0200
Simon FONTENEAU via samba <samba at lists.samba.org> wrote:

> Hi
> 
> Quick question about something I find surprising:
> 
> In tdb mode :
> 
> net cache list -s /etc/samba/smb.conf |grep '\-513'
> Key: IDMAP/GID2SID/100     Timeout: Tue Apr  9 14:34:48 2024 Value: 
> S-1-5-21-1040823229-2152490729-3717368692-513
> 
> id of group "domain users" is 100
> 
> But id 100 use by "users" system group:
> 
> getent group|grep users
> users:x:100:
> 
> Is this something voluntary?
> 
> Simon

No, it is something you get when using a DC as a fileserver, or to put
it another way, it only happens on a DC:

adminuser at rpidc1:~ $ getent group domain\ users
SAMDOM\domain users:x:100:

On a Unix domain member using the 'rid' backend:

rowland at devstation:~$ getent group domain\ users
domain users:x:10513:

Rowland