I confirmed that the following two line changes fixes the issue. --- a/source3/lib/idmap_cache.c +++ b/source3/lib/idmap_cache.c @@ -216,6 +216,8 @@ static void idmap_cache_xid2sid_parser(time_t timeout, DATA_BLOB blob, if (value[0] != '-') { state->ret = string_to_sid(state->sid, value); } + else + state->ret = true; if (state->ret) { *state->expired = (timeout <= time(NULL)); }
Appears to have been fixed in Samba 4.11 with d9303e8eb90d48f09f2e2e8bdf01f4a7c3c21d11.