Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-8903: How to manually set domainsid when samba server is migrating from one domain to another

1 August,17 at 05:45 PM

Question: 

How to manually get the domain SID when the adbindproxy.pl script does not prompt for the password of the administrator user if it is unable to resolve without a password.
 
Answer:
 
adinfo -y domain (to get domain map info)
net setdomainsid <copy the SID from domain map info from step above>
net getdomainsid (to verify if the domainsid was set correctly)
 
Make sure tdb-tools is enabled if not please run yam install tdb-tools to have it enabled. After it’s being enabled, please run the following command.
 
tdbdump  /var/lib/samba/private/secrets.tdb
 
It will generate the file and shows as the following output: (Should be able to a pair SID one from Domain and one from Host)
 
{
key(17) = "SECRETS/SID/OCEAN"
data(68) = "\01\04\00\00\00\00\00\05\15\00\00\00{\E2-C\18!\F3\BEP\E8\84\A8\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00"
}
{
key(17) = "SECRETS/SID/RHELH"
data(68) = "\01\04\00\00\00\00\00\05\15\00\00\00\DE\11\BD\BE\99V\E6\B9\E7\FD\03\A5\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00"
}
{
key(38) = "SECRETS/MACHINE_SEC_CHANNEL_TYPE/OCEAN"
data(4) = "\02\00\00\00"
}
{
key(38) = "SECRETS/MACHINE_LAST_CHANGE_TIME/OCEAN"
data(8) = "\B5\A2VY\EB\7F\00\00"
}
{
key(30) = "SECRETS/MACHINE_PASSWORD/OCEAN"
data(20) = "*c|>6v@_&&5)Lu8m;#F\00"
 

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.

Related Articles

 articleKB-9446: Cannot get adbindproxy.pl script to complete after disabled SMBv1 articleKB-6073: How to join the Linux/Unix Centrify Server to Active Directory with specific Computer Role? articleKB-6041: How to show current license type in use by adclient articleKB-6038: How to specify the license type to use when joining the server to AD using adjoin? articleKB-2727: How to migrate SQL databases associated with a Centrify_DirectManage Audit installation from one database server to another articleKB-6040: How to change the license type in use after adclient successful joined to the AD? articleKB-6056: How to report the group policy settings that are in effect for the local computer? articleHow to manually set domainsid when SMBv1 is disabled articleKB-7555: Unable to login as root after upgrade to Centrify Suite 2016 (CDC 5.3.0)