On to, 14 loka 2021, John Tor via FreeIPA-users wrote:
Hi,
I have this problem, but i donĀ“t know what is the las component of the SID, i have this
one SID as example:
S-1-5-21-87479985-2381909852-2776750896-1101, the las component is last four numbers?
actually work for users existents in ad, but new user not find for the IPA
Yes, that is the last component after a dash (-).
See
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-dtyp/78eb...
and the rest of MS-DTYP 2.4.2 section
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland