samba - Nov 2024 - Very strange: Samba is unable to access one of its own files

On Thu, 14 Nov 2024 10:21:17 -0500
"John R. Graham via samba" <samba at lists.samba.org> wrote:
> On 11/14/24 10:04, Rowland Penny via samba wrote:
> > Try running 'net cache flush' and try again with getent.
> > The first time Samba is asked for a users details it gets it from
> > AD, but it also then caches the details to speed things up, you are
> > probably reading from the cache.
> >
> > Rowland
> >
> Alas, 'net cache flush' had no effect. getent is still returning 
> information inconsistent with what's stored in AD.
> 
> - John
The only things that a Samba AD DC pulls from AD is the uidNumber and
gidNumber attributes (if they are set) and only then if 'idmap_ldb:use
rfc2307 = yes' is set in the DCs smb.conf.

What are you expecting ?

Rowland

On 11/14/24 10:48, Rowland Penny via samba wrote:
> The only things that a Samba AD DC pulls from AD is the uidNumber and
> gidNumber attributes (if they are set) and only then if 'idmap_ldb:use
> rfc2307 = yes' is set in the DCs smb.conf.
>
> What are you expecting ?
>
> Rowland
Oh. Well, I was expecting that the home directory and the shell 
attributes would be retrieved from AD--or else constructed from the 
'template homedir' and 'template shell' lines in smb.conf. The
values I
set there were:

 ???? template shell = /bin/bash
 ???? template homedir = /home/%U

but the getent is returning

HOME\jgraham:*:10000:100::/home/SAMDOM/jgraham:/bin/false

which appear to be the defaults for those two as opposed to what's 
specified in either smb.conf or AD.

- John