Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

How to manually set domainsid when SMBv1 is disabled

11 April,19 at 11:50 AM

Centrify script cannot complete successfully after disabled SMBv1. Because disabling SMBv1 breaks all the 'net npc getsid' that Centrify use in


You will get the following error message after trying to execute


Updating smb.conf with Centrify recommended settings...

Get Domain SID failed. Please try again with authentication and a valid DC.


Here are the instructions for how to manually get the domain SID when the script does not prompt for the password of the administrator user if it is unable to resolve without a password.


adinfo -y domain (to get domain map info)
net setdomainsid 
net getdomainsid (to verify if the domainsid was set correctly)

Make sure tdb-tools is enabled if not please run yam install tdb-tools to have it enabled. After it’s being enabled, please run the following command.

tdbdump  /var/lib/samba/private/secrets.tdb

It will generate the file and shows as the following output: (Should be able to see a pair SID one from Domain and one from Host)

data(68) = "\01\04\00\00\00\00\00\05\15\00\00\00{\E2-C\18!\F3\BEP\E8\84\A8\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00"
data(68) = "\01\04\00\00\00\00\00\05\15\00\00\00\DE\11\BD\BE\99V\E6\B9\E7\FD\03\A5\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00"
data(4) = "\02\00\00\00"
data(8) = "\B5\A2VY\EB\7F\00\00"
data(20) = "*c|>6v@_&&5)Lu8m;#F\00"