Hi LQ,

I will try to post as much info as I can without giving away any internal info. I use samba/winbind to connect to AD and allow AD user login on our RHEL servers. Recently my new images are giving me an error of "Could not fetch domain SID" when running /usr/bin/net getdomainsid. It is able to look up the SID for the local machine but not for the domain. I have the correct domain specified in my smb.conf file. I have tried running the command in debug mode but am receiving no information to point me in the right direction to start troubleshooting and resolving this.

Is there anyone out there that has run into this sort of an issue with samba or can give me some pointers on some tools I can use to start to diagnose this? I should also put out there that I have very little exp with samba/winbind.

Thank You!

145 views and no response, this seems to be a mystifying error. Anyone have some resources they can point me to?

Just for the record, my situation is probably a little bit different, but I'm struggling with this error too:

I join my AD domain using realmd/sssd;
Then I configure Samba;
It works fine if I set "security = user", but if I set "security = ads", smb.log shows: could not fetch domain SID;

The way I've found to workaround this, was leaving the domain, then joining it with realmd/winbind, then leaving the realm again (because my authentication won't work when I join the domain with realmd/winbind), then joining with realmd/sssd again.

This will make the domain SID mystically appear on wherever it goes to, and also make my AD-integrated authentication work for Samba.

Now I'm still trying to figure out why is it that joining the domain with realmd/winbind gets me the domain SID, while joining with realmd/sssd doesnt.