Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[Samba] Can't fetch domain SID

112 views
Skip to first unread message

Steve Zeng

unread,
Mar 4, 2005, 8:40:07 PM3/4/05
to
Hi,

I happened to delete /etc/samba/secrets.tdb. Now I can not get DOMAIN
SID by run:

net getlocalsid

Any idea how to recover it? Do I need to reinstall the whole Samba suite?


--
Regards,

Steve Zeng
Systems Administrator
Mainframe Entertainment Inc
T: (604) 628-1000 ext 5293
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

Kaplan, Marc

unread,
Mar 4, 2005, 8:50:05 PM3/4/05
to
What if you run net groupmap list? Can you see the domain SIDs as part
of the group SIDs there? If so, I would think you could use net
setlocalsid to restore it.

-Marc

Paul Gienger

unread,
Mar 5, 2005, 11:40:16 AM3/5/05
to

> I happened to delete /etc/samba/secrets.tdb. Now I can not get DOMAIN
> SID by run:
>
> net getlocalsid
>
> Any idea how to recover it? Do I need to reinstall the whole Samba suite?

If you have machine joined to the domain and can log in with a domain
user (which you should be able to do via cached credentials) you can
peruse through the registry among other things. In my registry I have this:
HKEY_USERS\S-1-5-21-112718084-1284083569-2990761952-5532

Which is my personal SID. The Domain SID is that without the -5532.

--
Paul Gienger Office: 701-281-1884
Applied Engineering Inc.
Systems Architect Fax: 701-281-1322
URL: www.ae-solutions.com mailto: pgie...@ae-solutions.com

Steve Zeng

unread,
Mar 7, 2005, 1:10:15 PM3/7/05
to
I ran it and got the following:

Domain Admins (S-1-5-21-3602356297-1326217435-1645885446-512) ->
Domain Admins
Domain Users (S-1-5-21-3602356297-1326217435-1645885446-513) ->
Domain Users
Domain Guests (S-1-5-21-3602356297-1326217435-1645885446-514) ->
Domain Guests
Domain Computers (S-1-5-21-3602356297-1326217435-1645885446-515) ->
Domain Computers
Administrators (S-1-5-32-544) -> Administrators
Print Operators (S-1-5-32-550) -> Print Operators
Backup Operators (S-1-5-32-551) -> Backup Operators
Replicators (S-1-5-32-552) -> Replicators

It looks strange, though. The SID
"S-1-5-21-3602356297-1326217435-1645885446" is the same as another Samba
PDC which is a testing Domain server in the same subnet.

Any idea?

Steve

0 new messages