Univention Bugzilla – Bug 31273
Standard AD groups created with arbitrary SIDs
Last modified: 2017-08-08 07:09:53 CEST
Currently some of the "well-known" security accounts are created in the join script of the S4 Connector, but with arbitrary SIDs, which get synchronized into the Samba/Active Directory, e.g.: dn: CN=Group Policy Creator Owners,CN=Groups,DC=school30u1,DC=qa objectSid: S-1-5-21-2279818299-2170836941-2993483381-11105 This group e.g. should have RID 520 (see URL) The following group SIDs should be fixed: * "Group Policy Creator Owners" * "RAS and IAS Servers" * "Domain Computers" * "Cert Publishers" * "Schema Admins" * "Enterprise Admins" * "Enterprise Read-only Domain Controllers" * "Denied RODC Password Replication Group" * "Allowed RODC Password Replication Group"
Bug #29486 needs to be fixed for this issue.
This issue has been filed against UCS 3. UCS 3 is out of the normal maintenance and many UCS components have vastly changed in UCS 4. If this issue is still valid, please change the version to a newer UCS version otherwise this issue will be automatically closed in the next weeks.
This issue has been filed against UCS 3.1. UCS 3.1 is out of maintenance and many UCS components have vastly changed in later releases. Thus, this issue is now being closed. If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen this issue. In this case please provide detailed information on how this issue is affecting you.