W
W
WSGlebKavash2022-03-20 23:46:14
Active Directory
WSGlebKavash, 2022-03-20 23:46:14

How to recover SID in Samba?

Moved an Active Directory domain controller to Samba. The first two days everything worked fine. On the third day, Samba stopped accepting connections via the smb protocol and does not allow computers to join the domain. NT_STATUS_INVALID_SID error. With the help of specialists from the German forum, we managed to calculate the problematic SID:S-1-5-21-3994923506-593853604-2408779341-1119

/var/log/samba/log.smbd
[2022/03/20 23:23:45.657908, 0] ../source4/auth/unix_token.c:78(security_token_to_unix_token)
Unable to convert first SID (S-1-5-21-3994923506-593853604-2408779341-1119) in user token to a UID. Conversion was returned as type 0, full token:
[2022/03/20 23:23:45.658419, 0] ../libcli/security/security_token.c:63(security_token_debug)
Security token SIDs (8):
SID[ 0]: S-1-5-21-3994923506-593853604-2408779341-1119
SID[ 1]: S-1-5-21-3994923506-593853604-2408779341-513
SID[ 2]: S-1-1-0
SID[ 3]: S-1-5-2
SID[ 4]: S-1-5-11
SID[ 5]: S-1-5-32-545
SID[ 6]: S-1-5-32-554
SID[ 7]: S-1-5-32-574
Privileges (0x 800000):
Privilege[ 0]: SeChangeNotifyPrivilege
Rights (0x 400):
This problem was discussed for another 2 years, but I did not find the correct solution.
How to fix a problematic Sid? How to fix Samba? How to start a domain?

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question