Answer the question
In order to leave comments, you need to log in
What's wrong with SAMBA part 2?
The beginning of the story is here.
Hello everybody. Time passes and samba continues to troll me. What has changed since then.
On an exact copy of the server, I updated the distro to stable, updated samba to stable from turnips, switched from tdb to rid. It seems to have gotten better. I found an incomprehensible thing, I suspect this is one ponytail that will help me solve the main problem.
We will train on the user ivanov.ip.
output id "DOMAIN\ivanov.ip"
uid=15386(DOMAIN\ivanov.ip) gid=10513(DOMAIN\domain users) groups=10513(DOMAIN\domain users),12786(DOMAIN\zakaz),11020(DOMAIN\it_dep ),11465(DOMAIN\1c),15625(DOMAIN\raomingprofiles),15343(DOMAIN\it_dep_all)
wbinfo -r gives the same groups
BUT if we request groups 11020(DOMAIN\it_dep), 15343(DOMAIN\it_dep_all), 12786(DOMAIN\zakaz) through getent group, we will see that this user is not there and THIS IS CORRECT. since in the domain it is in groups only in domain users, 1c, Mail, raomingprofiles, support. although winbind does not even give parts of these groups, and if we request groups that winbind did not show, we will see this user there:
getent group "DOMAIN\support"
DOMAIN\support:x:15311:DOMAIN\ivanov.ip,DOMAIN\petrov. av
At the same time, if we change its membership in groups, then wbinfo, id does not change anything, but in getent everything changes at once.
I reinstalled samba, installed a server from scratch, in the end it all ended in one result. But it turned out that if you clear through tdbtool /var/cache/samba/netsamlogon_cache.tdb, then everything becomes normal, and when membership changes, everything changes BUT as soon as this user accesses the network balls on samba, that's it, BAM and you are bewitched groups.
I would be grateful for any thoughts, advice, guesses!
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question