samba - Apr 2016 - win 2012, active directory, samba4 share, only sid shown

Hello all, 

Im having a win 2012 Server with ad and redhat and centos with samba4 clients. I
configured a Testmaschine with the latest centos with samba4, kerberos and sssd.
Hard work and took alot of time to get all running. I can access the share and
want to change owner or permission over win explorer/ security tab. This is only
running using an extra data Partition where a central samba share points to it.
ex /costumer as an extra partition an in samba conf: path = /costumer .

As far as I know the recommended way is to use the win- explorer to set
permissions on the share. I can do that, but reopen permission tab only sid are
shown with a question mark, please have a look at attached file:



This not very useful. 
Now Im stuck, cause I dont know if is a win problem or a samba. 

After searching and a lot of trying Im not able to solve this. 

Can someone help? 

Tia 
Stefan

Hello all,
can someone help?

Tia
Stefan

Am Wednesday 20 April 2016, 14:19:42 schrieb Stefan
Fuhrmann:
> Hello all,
> 
> Im having a win 2012 Server with ad and redhat and centos with samba4
> clients. I configured a Testmaschine with the latest centos with samba4,
> kerberos and sssd. Hard work and took alot of time to get all running. I
> can access the share and want to change owner or permission over win
> explorer/ security tab. This is only running using an extra data Partition
> where a central samba share points to it. ex /costumer as an extra
> partition an in samba conf: path = /costumer .
> 
> As far as I know the recommended way is to use the win- explorer to set
> permissions on the share. I can do that, but reopen permission tab only sid
> are shown with a question mark, please have a look at attached file:
> 
> 
> 
> This not very useful.
> Now Im stuck, cause I dont know if is a win problem or a samba.
> 
> After searching and a lot of trying Im not able to solve this.
> 
> Can someone help?
> 
> Tia
> Stefan

We don't see any attachments... Can you post it somewhere, then include a
link?

As for the SID errors, what are you using for the DNS server?

On Thu, Apr 21, 2016 at 8:37 AM, Stefan Fuhrmann <
stefan at fuhrmann.homedns.org> wrote:
> Hello all,
> can someone help?
>
> Tia
> Stefan
>
> Am Wednesday 20 April 2016, 14:19:42 schrieb Stefan Fuhrmann:
> > Hello all,
> >
> > Im having a win 2012 Server with ad and redhat and centos with samba4
> > clients. I configured a Testmaschine with the latest centos with
samba4,
> > kerberos and sssd. Hard work and took alot of time to get all running.
I
> > can access the share and want to change owner or permission over win
> > explorer/ security tab. This is only running using an extra data
> Partition
> > where a central samba share points to it. ex /costumer as an extra
> > partition an in samba conf: path = /costumer .
> >
> > As far as I know the recommended way is to use the win- explorer to
set
> > permissions on the share. I can do that, but reopen permission tab
only
> sid
> > are shown with a question mark, please have a look at attached file:
> >
> >
> >
> > This not very useful.
> > Now Im stuck, cause I dont know if is a win problem or a samba.
> >
> > After searching and a lot of trying Im not able to solve this.
> >
> > Can someone help?
> >
> > Tia
> > Stefan
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

Hello all,

with the great help of Sumit Bose from sssd- mailinglist the issue is solved:

"ah, can you try to add 'use_fully_qualified_names = True' to the
[domain/...] section of sssd.conf, restart SSSD and try again? Now
'wbinfo -s ....' (lower-case s) should return a result as well."

That did the trick!!

Stefan