Yep, it is some extra *-513* in the end, also I can not understand # net groupmap list Domain Users (S-1-5-21-2139989288-483860436-2398042574-513) -> Domain Users
User SID: S-1-5-21-2139989288-483860436-2398042574-3152 is okey too. Primary Group SID: S-1-5-21-3745118107-2241246581-749181168-513*-513* is good too, # net getlocalsid MYDOMAIN.COM SID for domain MYDOMAIN .COM is: S-1-5-21-3745118107-2241246581-749181168-513 I guess problem is in file passdb.tdb but I really don't know what to do with this ... > Hi Alan, > I do not know how you came about this setup, but from a quick glance the > sid defined in alexander's Primary Group SID is incorrect: > Domain Users' sid is defined by > SID: S-1-5-21domain-513 (from > http://support.microsoft.com/**kb/243330<http://support.microsoft.com/kb/243330> > ) > So it seems to me that: > 1) you have additional -513 appended at the end > 2) Your domain portion of the sid for Primary Group SID is different to > the one used in the User SID and to the ones listed by net groupmap admins > So shouldn't alexander's Primary Group SID be > S-1-5-21-2139989288-483860436-**2398042574-513? > > HTH > > L > -- *בברכה, * *אלכס ברבר* *+9 72 54 285 952 3 * *www.linuxspace.org* <http://www.linuxspace.org> *--* *Best regards.* *Alex Berber* *+9 72 54 285 952 3* *www.linuxspace.org* <http://www.linuxspace.org/> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
