s4:dsdb_lookup_rids - "unsigned" counters fit better than "signed" in this case