Environment:
UCS Corporate Server release version is 4.4-2 errata301.
1x Master
1x Backup
univention-samba4 8.0.0-27A~4.4.0.201908051359
python-univention-connector-s4 13.0.2-48A~4.4.0.201910011641
diagnostic check:
No user or group with SID S-1-5-32-545 found, expected 'Users'. User or group with name 'Users' has sid S-1-5-21-1694607643-412015992-1075375335-545, but should be S-1-5-32-545.
No user or group with SID S-1-5-32-544 found, expected 'Administrators'. User or group with name 'Administrators' has sid S-1-5-21-1694607643-412015992-1075375335-544, but should be S-1-5-32-544.
No user or group with SID S-1-5-32-546 found, expected 'Guests'. User or group with name 'Guests' has sid S-1-5-21-1694607643-412015992-1075375335-546, but should be S-1-5-32-546.
No user or group with SID S-1-5-32-551 found, expected 'Backup Operators'. User or group with name 'Backup Operators' has sid S-1-5-21-1694607643-412015992-1075375335-551, but should be S-1-5-32-551.
No user or group with SID S-1-5-32-557 found, expected 'Incoming Forest Trust Builders'. User or group with name 'Incoming Forest Trust Builders' has sid S-1-5-21-1694607643-412015992-1075375335-557, but should be S-1-5-32-557.
No user or group with SID S-1-5-32-568 found, expected 'IIS_IUSRS'. User or group with name 'IIS_IUSRS' has sid S-1-5-21-1694607643-412015992-1075375335-568, but should be S-1-5-32-568.
No user or group with SID S-1-5-32-552 found, expected 'Replicator'. User or group with name 'Replicator' has sid S-1-5-21-1694607643-412015992-1075375335-552, but should be S-1-5-32-552.
No user or group with SID S-1-5-32-549 found, expected 'Server Operators'. User or group with name 'Server Operators' has sid S-1-5-21-1694607643-412015992-1075375335-549, but should be S-1-5-32-549.
No user or group with SID S-1-5-32-554 found, expected 'Pre-Windows 2000 Compatible Access'. User or group with name 'Pre-Windows 2000 Compatible Access' has sid S-1-5-21-1694607643-412015992-1075375335-554, but should be S-1-5-32-554.
No user or group with SID S-1-5-32-548 found, expected 'Account Operators'. User or group with name 'Account Operators' has sid S-1-5-21-1694607643-412015992-1075375335-548, but should be S-1-5-32-548.
No user or group with SID S-1-5-32-559 found, expected 'Performance Log Users'. User or group with name 'Performance Log Users' has sid S-1-5-21-1694607643-412015992-1075375335-559, but should be S-1-5-32-559.
No user or group with SID S-1-5-32-561 found, expected 'Terminal Server License Servers'. User or group with name 'Terminal Server License Servers' has sid S-1-5-21-1694607643-412015992-1075375335-561, but should be S-1-5-32-561.
No user or group with SID S-1-5-32-556 found, expected 'Network Configuration Operators'. User or group with name 'Network Configuration Operators' has sid S-1-5-21-1694607643-412015992-1075375335-556, but should be S-1-5-32-556.
No user or group with SID S-1-5-32-555 found, expected 'Remote Desktop Users'. User or group with name 'Remote Desktop Users' has sid S-1-5-21-1694607643-412015992-1075375335-555, but should be S-1-5-32-555.
No user or group with SID S-1-5-32-573 found, expected 'Event Log Readers'. User or group with name 'Event Log Readers' has sid S-1-5-21-1694607643-412015992-1075375335-573, but should be S-1-5-32-573.
No user or group with SID S-1-5-32-569 found, expected 'Cryptographic Operators'. User or group with name 'Cryptographic Operators' has sid S-1-5-21-1694607643-412015992-1075375335-569, but should be S-1-5-32-569.
No user or group with SID S-1-5-32-560 found, expected 'Windows Authorization Access Group'. User or group with name 'Windows Authorization Access Group' has sid S-1-5-21-1694607643-412015992-1075375335-560, but should be S-1-5-32-560.
No user or group with SID S-1-5-32-574 found, expected 'Certificate Service DCOM Access'. User or group with name 'Certificate Service DCOM Access' has sid S-1-5-21-1694607643-412015992-1075375335-574, but should be S-1-5-32-574.
No user or group with SID S-1-5-32-562 found, expected 'Distributed COM Users'. User or group with name 'Distributed COM Users' has sid S-1-5-21-1694607643-412015992-1075375335-562, but should be S-1-5-32-562.
No user or group with SID S-1-5-32-558 found, expected 'Performance Monitor Users'. User or group with name 'Performance Monitor Users' has sid S-1-5-21-1694607643-412015992-1075375335-558, but should be S-1-5-32-558.
No user or group with SID S-1-5-21-1694607643-412015992-1075375335-571 found, expected 'Allowed RODC Password Replication Group'. User or group with name 'Allowed RODC Password Replication Group' has sid S-1-5-21-1694607643-412015992-1075375335-11021, but should be S-1-5-21-1694607643-412015992-1075375335-571.
No user or group with SID S-1-5-21-1694607643-412015992-1075375335-553 found, expected 'RAS and IAS Servers'. User or group with name 'RAS and IAS Servers' has sid S-1-5-21-1694607643-412015992-1075375335-11061, but should be S-1-5-21-1694607643-412015992-1075375335-553.
No user or group with SID S-1-5-21-1694607643-412015992-1075375335-517 found, expected 'Cert Publishers'. User or group with name 'Cert Publishers' has sid S-1-5-21-1694607643-412015992-1075375335-11079, but should be S-1-5-21-1694607643-412015992-1075375335-517.
No user or group with SID S-1-5-21-1694607643-412015992-1075375335-572 found, expected 'Denied RODC Password Replication Group'. User or group with name 'Denied RODC Password Replication Group' has sid S-1-5-21-1694607643-412015992-1075375335-11025, but should be S-1-5-21-1694607643-412015992-1075375335-572.
my checks
with
ldbedit -a -H /var/lib/samba/private/sam.ldb cn=Guests
I had checked and it is correct SID,
Problem
Looks like that it “wrong” SID in the UCS. How can i change it or correct this problem?