nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How to get the SID for a userid or groupid?

Adam Stoller

Does anyone know of any Perl modules / code for obtaining the SID for a userid or groupid - to make things "simpler" - I'll say for a local-userid or local-groupid (as opposed to domain-userid / domain-groupid).

I know I could create a file in TeamSite with the userid/groupid and then use iwidmap to extract it out - but I'm hoping to get this information without having to create a dummy file first (I'll be using iwidmap afterwards with this information for remapping purposes)

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

Find more posts tagged with

Comments

ISCBorisB

For Win 2003 and up.

If you are (or can login as) a group member then "whoami /groups" will return
group membership info for current user, SIDs including.
There are few formatting options (/fo csv, /fo table, etc...) - usability of all that is limited
by effective UID though....

Adam Stoller

Hmm - more than I had but not as much as I want.

This limits the output to the groups to which I belong - whereas I'm hoping to get information about all the local groups (and potentially users) on the system)

I may play around with this and see about adding myself to a group and then running the command and then removing myself from the group ...

Any other ideas?

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

ISCBorisB

No better one, just a variation of yours.

I used "whoami /user" from the script to figure out an effective
UID TS runs it under and then added it to few groups I needed

JonathonG

You could take a look at the Win32: Smiley Frustrated

ecurity:

ID library. It has a ConvertNameToSid function that sounds like what you want.

Jonathon
Interwoven Developer
Allstate, Inc.

Adam Stoller

Hmm - could be. It's a bit of a pain to install:

Downloaded Win32:ecurity with CPAN utility - but it uses Build.PL instead of Makefile.PL - so it doesn't build automatically with CPAN
cd'd into cpan/build/Win32-Security-* directory
iwperl Build.PL
Requires Class:rototyped and Data&colon;:BitMask (same installation issues)
cd'd into cpan/build/Class-Prototyped-*; iwperl Build.PL; iwperl Build; iwperl Build test; iwperl Build install
cd'd into cpan/build/Data-BitMask-*; iwperl Build.PL; iwperl Build; iwperl Build test; iwperl Build install
cd'd into cpan/build/Win32-Security-*; iwperl Build.PL; iwperl Build; iwperl Build test; iwperl Build install

Looks like the code ends up being something like this:#!c:/iw-home/iw-perl/bin/iwperl
use strict;
use warnings;
use Win32: Smiley Frustrated

ecurity:

ID;
...
my $bsid = Win32: Smiley Frustrated

ecurity:

ID::ConvertNameToSid($groupname) || die "Unrecognized group name '$groupname'";
my $ssid = Win32: Smiley Frustrated

ecurity:

ID::ConvertSidToStringSid($bsid);At which point I should be able to do substitutions in a data file extracted from TeamSite with iwidmap and then eventually feed the changes back in, deactivate/reactivate the store and [hopefully] everything works right.

Thanks for the pointer - unfortunately, since this script has to be used on someone else's system which is out of my reach / control - I'm not sure that the addition of the other modules is going to work well - so I might have to stick with C:/WINDOWS/system32/whoami and net localgroups as commands to achieve the same basic results... sigh.

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

JonathonG

I hadn't actually used the module. Its helpful to know the complexities involved. Interestingly, ActiveState's ppm (Perl Package Manager) doesn't even list Win32: Smiley Frustrated

ecurity as an available module.

Jonathon
Interwoven Developer
Allstate, Inc.

Adam Stoller

I ended up having too many problems using the 'net localgroups' / 'whoami /groups' strategy - I ended up using Win32: Smiley Frustrated

ecurity:

ID and I believe I now got my code working - what a pain.

Thanks for the pointers / tips

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com