Question:
How to manually get the domain SID when the adbindproxy.pl script does not prompt for the password of the administrator user if it is unable to resolve without a password.
Answer:
adinfo -y domain (to get domain map info)
net setdomainsid <copy the SID from domain map info from step above>
net getdomainsid (to verify if the domainsid was set correctly)
Make sure tdb-tools is enabled if not please run yam install tdb-tools to have it enabled. After it’s being enabled, please run the following command.
tdbdump /var/lib/samba/private/secrets.tdb
It will generate the file and shows as the following output: (Should be able to a pair SID one from Domain and one from Host)
{
key(17) = "SECRETS/SID/OCEAN"
data(68) = "\01\04\00\00\00\00\00\05\15\00\00\00{\E2-C\18!\F3\BEP\E8\84\A8\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00"
}
{
key(17) = "SECRETS/SID/RHELH"
data(68) = "\01\04\00\00\00\00\00\05\15\00\00\00\DE\11\BD\BE\99V\E6\B9\E7\FD\03\A5\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00"
}
{
key(38) = "SECRETS/MACHINE_SEC_CHANNEL_TYPE/OCEAN"
data(4) = "\02\00\00\00"
}
{
key(38) = "SECRETS/MACHINE_LAST_CHANGE_TIME/OCEAN"
data(8) = "\B5\A2VY\EB\7F\00\00"
}
{
key(30) = "SECRETS/MACHINE_PASSWORD/OCEAN"
data(20) = "*c|>6v@_&&5)Lu8m;#F\00"
|
