<html><body><div style="font-family: arial,helvetica,sans-serif; font-size: 12pt; color: #000000"><div>Hmm, weird.<br></div><div>I ran ipa-adtrust-install and it says it said it had user without SID's, and I told it to generete SID's.</div><div>However, I still can't see them on the user.</div><div>a IPA-db doesn't reveal them being generated and I can't look them up via LDAP.</div><div><br></div><div>ldapsearch -Y GSSAPI uid=th ipaNTHash<br>.......<br># th, users, compat, casalogic.lan<br>dn: uid=th,cn=users,cn=compat,dc=casalogic,dc=lan<br><br># th, users, accounts, casalogic.lan<br>dn: uid=th,cn=users,cn=accounts,dc=casalogic,dc=lan<br><br>.....<br></div><div><br></div><div>Samba however starts fine now, but unable to find any users:</div><div>pdbedit -Lv<br>pdb_init_ipasam: support for pdb_enum_upn_suffixes enabled for domain casalogic.lan</div><div><br></div><div><br></div><div><br></div><div><span id="zwchr" data-marker="__DIVIDER__">----- On Oct 27, 2015, at 3:46 PM, Joshua Doll <joshua.doll@gmail.com> wrote:<br></span></div><div data-marker="__QUOTED_TEXT__"><blockquote style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;" data-mce-style="border-left: 2px solid #1010FF; margin-left: 5px; padding-left: 5px; color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><div dir="ltr"><div class="gmail_quote"><br><div><br><div>To get the ipaNTHash and ipaNTSecurityIdentifier attributes, I had to run the ipa-adtrust-install --add-sids, even though I was not setting up a trust. It would be nice if there was a way to generate these values another way, maybe there is but I missed it.<br><br></div>--Joshua D Doll<br> </div></div></div><br>-- <br>Manage your subscription for the Freeipa-users mailing list:<br>https://www.redhat.com/mailman/listinfo/freeipa-users<br>Go to http://freeipa.org for more info on the project<br></blockquote></div><div><br></div><div><br data-marker="__SIG_POST__"></div></div></body></html>