samba - Jun 2016 - Samba4 Domain Member Server "Getent show diferents UID"

On 14/06/16 18:36, Juan Ignacio wrote:
> Traducir del: Inglés
> Ok, I have correctly configured the option to use RFC2307 in the 
> Actide Directory Domain Controller and the option on the member server.
>
> But anyway still showing bad UIDs.
>
> Here we show how both configurations are actualemente.
>
> Within RSAT I can place the UID attribute for example uanaco.
>
> AD Domain Controller
>
> wbinfo --user-info = uanaco
> KENNEDY \ uanaco: *: 3000783: 100: uanaco: / home / ADDC / uanaco: / 
> bin / false
>
> RSAT changed by UID 1111
>
> wbinfo --user-info = uanaco
> ADDC \ uanaco: *: 1111: 100: uanaco: / home / ADDC / uanaco: / bin / false
>
> member Server
>
> wbinfo --user-info = uanaco
> uanaco: *: 100642: 100008: uanaco: / home / ADDC / uanaco: / bin / false
>
> After the change of UID.
>
> wbinfo --user-info = uanaco
> uanaco: *: 100642: 100008: uanaco: / home / ADDC / uanaco: / bin / false
>
> When I add the UID number to uanaco, information within the AD Domain 
> Controller changed.
>
> In the member server he did not change the UID.
>
Try running 'net cache flush' on the Unix domain machines.

Can I ask what version of windows you are using ?

Rowland

Yes, im run ´´net cache flush´ on ADDC and MEMBER SERVER.

Im using Win10, And Win7



2016-06-14 14:40 GMT-03:00 Rowland penny <rpenny at samba.org>:
> On 14/06/16 18:36, Juan Ignacio wrote:
>
>> Traducir del: Inglés
>> Ok, I have correctly configured the option to use RFC2307 in the Actide
>> Directory Domain Controller and the option on the member server.
>>
>> But anyway still showing bad UIDs.
>>
>> Here we show how both configurations are actualemente.
>>
>> Within RSAT I can place the UID attribute for example uanaco.
>>
>> AD Domain Controller
>>
>> wbinfo --user-info = uanaco
>> KENNEDY \ uanaco: *: 3000783: 100: uanaco: / home / ADDC / uanaco: /
bin
>> / false
>>
>> RSAT changed by UID 1111
>>
>> wbinfo --user-info = uanaco
>> ADDC \ uanaco: *: 1111: 100: uanaco: / home / ADDC / uanaco: / bin /
false
>>
>> member Server
>>
>> wbinfo --user-info = uanaco
>> uanaco: *: 100642: 100008: uanaco: / home / ADDC / uanaco: / bin /
false
>>
>> After the change of UID.
>>
>> wbinfo --user-info = uanaco
>> uanaco: *: 100642: 100008: uanaco: / home / ADDC / uanaco: / bin /
false
>>
>> When I add the UID number to uanaco, information within the AD Domain
>> Controller changed.
>>
>> In the member server he did not change the UID.
>>
>>
> Try running 'net cache flush' on the Unix domain machines.
>
> Can I ask what version of windows you are using ?
>
>
> Rowland
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

The member server still not in production so I can do anything with it.

2016-06-14 14:46 GMT-03:00 Juan Ignacio <juan.ignacio.pazos at gmail.com>:
> Yes, im run ´´net cache flush´ on ADDC and MEMBER SERVER.
>
> Im using Win10, And Win7
>
>
>
> 2016-06-14 14:40 GMT-03:00 Rowland penny <rpenny at samba.org>:
>
>> On 14/06/16 18:36, Juan Ignacio wrote:
>>
>>> Traducir del: Inglés
>>> Ok, I have correctly configured the option to use RFC2307 in the
Actide
>>> Directory Domain Controller and the option on the member server.
>>>
>>> But anyway still showing bad UIDs.
>>>
>>> Here we show how both configurations are actualemente.
>>>
>>> Within RSAT I can place the UID attribute for example uanaco.
>>>
>>> AD Domain Controller
>>>
>>> wbinfo --user-info = uanaco
>>> KENNEDY \ uanaco: *: 3000783: 100: uanaco: / home / ADDC / uanaco:
/ bin
>>> / false
>>>
>>> RSAT changed by UID 1111
>>>
>>> wbinfo --user-info = uanaco
>>> ADDC \ uanaco: *: 1111: 100: uanaco: / home / ADDC / uanaco: / bin
/
>>> false
>>>
>>> member Server
>>>
>>> wbinfo --user-info = uanaco
>>> uanaco: *: 100642: 100008: uanaco: / home / ADDC / uanaco: / bin /
false
>>>
>>> After the change of UID.
>>>
>>> wbinfo --user-info = uanaco
>>> uanaco: *: 100642: 100008: uanaco: / home / ADDC / uanaco: / bin /
false
>>>
>>> When I add the UID number to uanaco, information within the AD
Domain
>>> Controller changed.
>>>
>>> In the member server he did not change the UID.
>>>
>>>
>> Try running 'net cache flush' on the Unix domain machines.
>>
>> Can I ask what version of windows you are using ?
>>
>>
>> Rowland
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>
>

On 14/06/16 18:46, Juan Ignacio wrote:
> Yes, im run ´´net cache flush´ on ADDC and MEMBER SERVER.
>
> Im using Win10, And Win7
>
>
>
OK, if you are running RSAT on a windows 10 machine, can I suggest you 
use a windows 7 machine instead, it is my understanding that win10 no 
longer has the Unix attributes tab.

If you use ADUC on a win7 machine, you can install IDMU, this will get 
you the Unix attributes tabs, when you add a UID to a windows user, it 
will also add these attributes:

unixUserPassword
uid
msSFU30Name
msSFU30NisDomain
uidNumber
unixHomeDirectory
loginShell

Domain Users also needs to have a gidNumber attribute

If everything is setup correctly, you should get the same UID for a user 
on a DC or domain member.

Is /etc/nsswitch.conf set up correctly ?

Rowland