Questions[sid](server)

Reading https://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html, I found out that there exists an alias for groups. But what does this alias mean? Does it means that it is connected to another group and inherit this permissions? If so, how could I found out what group it belongs to?

I looked on the internet but could not find anything about this. There is a lot about SID, RID on the internet, but nothing about aliases. What does it mean in a SID context?

SIDs exist in Active Directory domains (Windows Server) and Samba (PDC).

I've somehow deleted /etc/hosts on my testing system, which is Debian Sid. Now I want to install the default /etc/hosts. I tried dpkg -S /etc/hosts to find out which package contains /etc/hosts, but none was found. Where can I download it from ?

I have a number of machines running Win2k3 and 2k8R2 that I would like to join to a domain. All the machines have been imaged from the same image, without using sysprep or anything similar. This means they all have the same SID. Am I going to run into any issues if I try to join all of these to the same domain?

I've already tried this with a couple test machines, and I experienced issues when the domain controllers came from the same image as all the other computers (I was seeing error log messages complaining that the domain controller SID was the same as the machine SID).

I did another test with freshly installed domain controllers (so they had different SIDs), and everything seemed okay.

I've done some research on this, and found some conflicting information. I can find a lot of references to this post, which seems to indicate that the duplicate SIDs are okay. I also find a lot of people saying horrible unspeakable things will happen unless I correct the SIDs.

Are these duplicate SIDs going to cause a problem?

Before anyone suggests any of these:

• Doing fresh installs of all these machines with new SIDs is out of the question, it would take many months to get through all the machines.
• Newsid.exe has been officially deprecated, and is not something that I would feel comfortable attempting. The developer of it has not tested it on anything newer than XP.
• Sysprep is not supported on existing machines. (second paragraph)

How can I determine user name and domain if all I have is the user's SID?

I accidentally deleted a user account, and need to recreate it with the same SID. I've created a new user account with the same name, but how do I edit the objectSid attribute? ADSIEDIT errors with "Access to the attribute is not permitted because the attribute is owned by the Security Accounts Manager (SAM)". Any other methods?