samba - Oct 2014 - Cannot add user to group in Samba AD DC

I create domain in Samba AD DC and add user 'cas' and group
'aaa':

 # samba-tool user list | grep cas
 cas
 # samba-tool group list | grep aaa
 aaa

Now I try to add user 'cas' to group 'aaa':

 # samba-tool group addmembers aaa cas -Uadministrator
 Added members to group aaa

But listmembers does not show this user in group:

 # samba-tool group listmembers aaa -Uadministrator
 #

There is no memberOf fields in sam.ldb for user 'cas':
 # LDB_MODULES_PATH=/usr/lib64/samba/ldb ldbsearch \
 > -H /var/lib/samba/private/sam.ldb '(cn=cas)' \
 > memberOf | grep ^memberOf
 #

What's wrong?

-- 
Andrey Cherepanov
ALT Linux
cas at altlinux.ru

On 15/10/14 10:21, ?????? ????????? wrote:
> I create domain in Samba AD DC and add user 'cas' and group
'aaa':
>
>   # samba-tool user list | grep cas
>   cas
>   # samba-tool group list | grep aaa
>   aaa
>
> Now I try to add user 'cas' to group 'aaa':
>
>   # samba-tool group addmembers aaa cas -Uadministrator
>   Added members to group aaa
>
> But listmembers does not show this user in group:
>
>   # samba-tool group listmembers aaa -Uadministrator
>   #
>
> There is no memberOf fields in sam.ldb for user 'cas':
>   # LDB_MODULES_PATH=/usr/lib64/samba/ldb ldbsearch \
>   > -H /var/lib/samba/private/sam.ldb '(cn=cas)' \
>   > memberOf | grep ^memberOf
>   #
>
> What's wrong?
>
Hi, it should work, try:

ldbsearch -H /var/lib/samba/private/sam.ldb '(cn=cas)'

This should show the users AD entry, does it have the 'memberOf'
attribute ?

Rowland