nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

CIFS SID lookup

TonyWu

Hi,

Please advise how to lookup SID in clsuter data ontap 8.3

CIFS Lookup is not working.

Thanks.

Tony

Find more posts tagged with

CIFS and SMB

Accepted answers

mbeattie

Hi Tony,

This works on 8.2.1, not sure if it's changed in 8.3

cluster1::*> diag secd authentication translate -node local -vserver vserver1 -win-name user1

S-1-5-21-3150332139-2813398079-754052488-1110

However if all you want is the SID of an AD user you might consider using the dsquery utility if you have the RSAT tools installed. EG:

C:\>dsquery user forestroot -samid user1 | dsget user -sid
sid
S-1-5-21-3150332139-2813398079-754052488-1110
dsget succeeded

/matt

All comments

mbeattie

Hi Tony,

This works on 8.2.1, not sure if it's changed in 8.3

cluster1::*> diag secd authentication translate -node local -vserver vserver1 -win-name user1

S-1-5-21-3150332139-2813398079-754052488-1110

However if all you want is the SID of an AD user you might consider using the dsquery utility if you have the RSAT tools installed. EG:

C:\>dsquery user forestroot -samid user1 | dsget user -sid
sid
S-1-5-21-3150332139-2813398079-754052488-1110
dsget succeeded

/matt

TonyWu

Hi,

I looks not able to resolve.

Please see the attachment

sid l ookup.jpg

TonyWu

Hi,

Please advise - The error SecD Error: User not found"

SID lookup 2.jpg

Is there anyway to query the bulit-in user account

Tony

mbeattie

Hi Tony,

The SID is not resolved to a user (or group) because the object has been deleted in Active Directory (hence any lookup on that SID will fail). You need to restore the group or user in able to resolve it. See

https://technet.microsoft.com/en-us/library/dd379509%28v=ws.10%29.aspx

/matt

TonyWu

Hi Matt,

I guess it is a built-in administrator of Netapp CIFS account.

How can I convert the bulit in administrator account to SID?

thanks.

Tony

cyberoy

Hello,

I am having the same issue as mentioned above, however the groups are in AD and still SID translation is not happening.

I have checked almost everything, and still unable to find the issue.

diag secd command doesnt work for me on 8.3.2

Appreciate any help...

Thank you and Regards

ShrikantWD

toaster> cifs lookup mday
  SID = S-1-5-21-39724982-1647982808-1376457959-1221

  toaster> cifs lookup NT-DOMAIN\mday
  SID = S-1-5-21-39724982-1647982808-1376457959-1221

  toaster> cifs lookup BUILTIN\Administrators
  SID = S-1-5-32-544

  toaster> cifs lookup S-1-5-32-544
  name = BUILTIN\Administrators

  toaster> cifs lookup nonexistentuser
  lookup failed