samba - Jul 2019 - getent passwd shows old name for renamed user

On 18/07/2019 17:36, Kris Lou via samba wrote:
> Might have something to do with this bug:
> https://bugzilla.samba.org/show_bug.cgi?id=11482
>
> You can find and make the relevant changes with ADSI Edit.
>
>
The problem is that renaming a user on Linux works the opposite way to 
Windows and neither renames everything.

If you rename on Linux with ldbrename, it renames dn, cn, name and 
distinguishedname, it doesn't rename any other attributes,

Windows renames everything except dn, cn, name and distinguishedname

Rowland

W dniu 2019-07-18 o?18:46, Rowland penny via samba
pisze:
> On 18/07/2019 17:36, Kris Lou via samba wrote:
>> Might have something to do with this bug:
>> https://bugzilla.samba.org/show_bug.cgi?id=11482
>>
>> You can find and make the relevant changes with ADSI Edit.
>>
>>
> The problem is that renaming a user on Linux works the opposite way to 
> Windows and neither renames everything.
>
> If you rename on Linux with ldbrename, it renames dn, cn, name and 
> distinguishedname, it doesn't rename any other attributes,
>
> Windows renames everything except dn, cn, name and distinguishedname
>
On my second linux member (backup) getent passwd returns new name:

[root at backup ~]# getent passwd
SAMDOM\hlg:*:10001:10000::/home/bar:/bin/sh

There are two differences:

 ?- no description in passwd line
 ?- this member does not have "winbind use default domain = yes" in 
config file.

The rest is the same: OS, samba version.

I changed uid, sAMAccountName, msFU30Name from 'foo' to 'bar'
using ADUC
attribute editor. Now I have 'bar' instead of 'foo' in LDAP
attributes.
I double checked that attribues changed witch ldbsearch on Samba AD.

But getent passwd still shows 'foo' on first machine.

Regards,
?ukasz

On 18/07/2019 20:20, ?ukasz Michalski via samba wrote:
> W dniu 2019-07-18 o?18:46, Rowland penny via samba pisze:
>> On 18/07/2019 17:36, Kris Lou via samba wrote:
>>> Might have something to do with this bug:
>>> https://bugzilla.samba.org/show_bug.cgi?id=11482
>>>
>>> You can find and make the relevant changes with ADSI Edit.
>>>
>>>
>> The problem is that renaming a user on Linux works the opposite way 
>> to Windows and neither renames everything.
>>
>> If you rename on Linux with ldbrename, it renames dn, cn, name and 
>> distinguishedname, it doesn't rename any other attributes,
>>
>> Windows renames everything except dn, cn, name and distinguishedname
>>
> On my second linux member (backup) getent passwd returns new name:
>
> [root at backup ~]# getent passwd
> SAMDOM\hlg:*:10001:10000::/home/bar:/bin/sh
>
> There are two differences:
>
> ?- no description in passwd line
> ?- this member does not have "winbind use default domain = yes"
in
> config file.
>
> The rest is the same: OS, samba version.
>
> I changed uid, sAMAccountName, msFU30Name from 'foo' to
'bar' using
> ADUC attribute editor. Now I have 'bar' instead of 'foo' in
LDAP
> attributes. I double checked that attribues changed witch ldbsearch on 
> Samba AD.
>
> But getent passwd still shows 'foo' on first machine.
>
> Regards,
> ?ukasz
>
>
Try running 'net cache flush'

Rowland

On 18/07/2019 21:03, ?ukasz Michalski wrote:
>
> W dniu 2019-07-18 o?21:22, Rowland penny via samba pisze:
>> Try running 'net cache flush'
>>
>> Rowland
>>
> Checked all open files that winbind has and found old name in:
>
> ?/var/cache/samba/netsamlogon_cache.tdb
>
> Is it safe to delete that file and restart winbind?
>
> Regards, ?ukasz
>
Yes, it is just a cache, it will be recreated

Rowland