On 02/07/12 16:15, Alan Holt wrote:
Also, this is SID of groups in domain:
# net groupmap list
Domain Admins (S-1-5-21-2139989288-483860436-2398042574-512) -> Domain
Admins
Domain Users (S-1-5-21-2139989288-483860436-2398042574-513) -> Domain Users
Domain Guests (S-1-5-21-2139989288-483860436-2398042574-514) -> Domain
Guests
Domain Computers (S-1-5-21-2139989288-483860436-2398042574-515) -> Domain
Computers
Administrators (S-1-5-32-544) -> Administrators
and this is SID of my user:
# pdbedit -Lv alexander
User SID: S-1-5-21-2139989288-483860436-2398042574-3186
Primary Group SID: S-1-5-21-3745118107-2241246581-749181168-513-513
They are completely different ....
Hi Alan,
I do not know how you came about this setup, but from a quick glance the
sid defined in alexander's Primary Group SID is incorrect:
Domain Users' sid is defined by
SID: S-1-5-21domain-513 (from http://support.microsoft.com/kb/243330)
So it seems to me that:
1) you have additional -513 appended at the end
2) Your domain portion of the sid for Primary Group SID is different to
the one used in the User SID and to the ones listed by net groupmap admins
So shouldn't alexander's Primary Group SID be
S-1-5-21-2139989288-483860436-2398042574-513?
HTH
L
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
