samba - Aug 2020 - Samba AD member - how to force sync AD attributes?

I have a setup with a single Windows DC and a couple of Samba member
servers, set up using the AD backend.

I noticed I made a mistake when setting up a group, giving it a gidNumber
that was already in use. So, using ADUC, I quickly changed it to a free
number.

And yet, running the command on a member server, getent group still shows
the number from before the change. 20 minutes later, still the same
picture.

That confuses me a bit. Shouldn't getent query the DC directly? Instead, it
seems to access some cached information that, in this specific case, is no
longer valid. If that's the case, can I somehow flush the cache or speed up
the synchronization? I tried reloading the configuration, restarting all
components (smbd, nbmd, winbind), all to no avail.

By the way, wbinfo shows the correct, updated information.

Viktor

Hai, 

Try net cache flush restart samba, test again. 

Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Viktor Trojanovic via samba
> Verzonden: dinsdag 18 augustus 2020 18:09
> Aan: samba
> Onderwerp: [Samba] Samba AD member - how to force sync AD attributes?
> 
> I have a setup with a single Windows DC and a couple of Samba member
> servers, set up using the AD backend.
> 
> I noticed I made a mistake when setting up a group, giving it 
> a gidNumber
> that was already in use. So, using ADUC, I quickly changed it 
> to a free
> number.
> 
> And yet, running the command on a member server, getent group 
> still shows
> the number from before the change. 20 minutes later, still the same
> picture.
> 
> That confuses me a bit. Shouldn't getent query the DC 
> directly? Instead, it
> seems to access some cached information that, in this 
> specific case, is no
> longer valid. If that's the case, can I somehow flush the 
> cache or speed up
> the synchronization? I tried reloading the configuration, 
> restarting all
> components (smbd, nbmd, winbind), all to no avail.
> 
> By the way, wbinfo shows the correct, updated information.
> 
> Viktor
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>