Hey,
these things look quite normal to me:
root@ucsmaster:~# net getdomainsid
SID for domain HBI is: S-1-5-21-677538019-1864647526-2656929208
root@ucsmaster:~# univention-s4search --cross-ncs cn='Domain Admins' objectSid
# record 1
dn: CN=Domain Admins,CN=Groups,dc=some,dc=thing
objectSid: S-1-5-21-677538019-1864647526-2656929208-512
# returned 1 records
# 1 entries
# 0 referrals
root@ucsmaster:~# univention-ldapsearch cn='Domain Admins' sambaSid
# extended LDIF
#
# LDAPv3
# base (default) with scope subtree
# filter: cn=Domain Admins
# requesting: sambaSid
#
# Domain Admins, groups, some.thing
dn: cn=Domain Admins,cn=groups,dc=some,dc=thing
sambaSID: S-1-5-21-677538019-1864647526-2656929208-512
# search result
search: 3
result: 0 Success
# numResponses: 2
# numEntries: 1
root@ucsmaster:~# univention-s4connector-list-rejected
UCS rejected
S4 rejected
There may be no rejected DNs if the connector is in progress, to be
sure stop the connector before running this script.
last synced USN: 7858
ldbsearch -H /var/lib/samba/private/idmap.ldb CN=$(net getdomainsid | sed -e 's/.* //')-512
# record 1
dn: CN=S-1-5-21-677538019-1864647526-2656929208-512
cn: S-1-5-21-677538019-1864647526-2656929208-512
objectClass: sidMap
objectSid: S-1-5-21-677538019-1864647526-2656929208-512
type: ID_TYPE_GID
xidNumber: 5000
distinguishedName: CN=S-1-5-21-677538019-1864647526-2656929208-512
# returned 1 records
# 1 entries
# 0 referrals
Cheers
Sebastian