samba - Oct 2017 - Samba 4.6.7 AD, Netapp CDOT 9.2 and missing "Domain Users" membership

On 10/23/2017 10:26 AM, Rowland Penny via samba wrote:
> OK, have you tried asking the Netapp company, 'how do I use this with
> Active Directory' ?
In this specific case no, but I already tried to open CIFS support cases
but at the end they tell me that It works as expected with a MS DC and
that Samba DC is not supported by them.
I cannot omit that I use Samba because they always want to know the DC
version in order to eventually setup a test environment.

PS: My storage vendor confirmed that It works as expected with a MS DC,
and I don't doubt of that considering that we are talking about Netapp
and that CIFS is one of their best features.

Thanks
Giuseppe

On Tue, 24 Oct 2017 12:27:18 +0200
Giuseppe Ravasio <giuseppe_ravasio at ch.modiano.com> wrote:
> On 10/23/2017 10:26 AM, Rowland Penny via samba wrote:
> > OK, have you tried asking the Netapp company, 'how do I use this
> > with Active Directory' ?
> 
> In this specific case no, but I already tried to open CIFS support
> cases but at the end they tell me that It works as expected with a MS
> DC and that Samba DC is not supported by them.
If they support a windows DC, then it should also work with a Samba DC,
just ask them how to they expect the netapp to be set up to connect to
a windows DC, they should at least be able to do this.
> I cannot omit that I use Samba because they always want to know the DC
> version in order to eventually setup a test environment.
> 
> PS: My storage vendor confirmed that It works as expected with a MS
> DC, and I don't doubt of that considering that we are talking about
> Netapp and that CIFS is one of their best features.
> 
I repeat, if it works with a windows DC, it should work with a Samba DC.
Have you tried asking them if the netapp uses Samba ? and if so, what
version.

What actual netapp is this ?

Rowland

On 10/24/2017 12:52 PM, Rowland Penny via samba wrote:
> If they support a windows DC, then it should also work with a Samba DC,
> just ask them how to they expect the netapp to be set up to connect to
> a windows DC, they should at least be able to do this.
The Netapp CIFS is set up exacltly as the doc says and, as I said
before, it works fine except for the Domain User membership.
There is plenty of documentation on Netapp side on how to setup the
filer and we followed the docs.
> I repeat, if it works with a windows DC, it should work with a Samba DC.
As I said before it works as expected with a Windows DC.
We double checked before writing to you setting up a new AD with Windows
2016 DC and I can confirm that with Windows the group membership works
as expected.
We also tried to redeploy the Samba Domain with the latest 4.7.0 and the
result is still the same.
> Have you tried asking them if the netapp uses Samba ? and if so, what
> version.
As I said before Netapp seems not to be using Samba but their own
implementation.
Also, if it where so, I think that GPL license would oblige them to
pubblish their changes that would be substantial.
Otherwise, if they had stolen some Samba code (which I doubt given the
fact that we are talking about the second player in enterprise storage
market and one of Fortune 500 company) they shurely wouldn't tell me!

In the KB article number 000001134 they officialy say that
"NetApp does not perform full interoperability testing between the Samba
client and Data ONTAP. Should an issue arise, using the resources
provided by Samba (documentation, forums, etc.) is recommended as a
first step. NetApp support personnel will assist on a best effort basis.
NetApp does not currently support Samba domain controllers in any
capacity."

> What actual netapp is this ?
FAS26
http://www.netapp.com/us/products/storage-systems/hybrid-flash-array/fas2600.aspx00

BTW If you are interested in having some debug logs or test something,
we have both Samba 4.7 and Windows 2016 ready for testing with the
Netapp system

Thanks
Giuseppe