samba - Feb 2022 - inconsistend ID mapping with rid backend and ctdb

On Thu, 2022-02-24 at 20:18 +0000, Jochen Korge || PCSM GmbH
wrote:
> Thanks for the quick reply.
> 
> I made the change regarding the netbios name yesterday. We got all
> IDs in the RID range. Today several "moved back" to the tdb
range.
> Do I have to drop the tdb database? And if so, ctdb getdbmap shows
> several possible databases.
Try running 'net cache flush' on all cluster members, this should flush
the authentication database on each member.
> 
> We joined a Domain with 2008 Schema and unfortunately we do have some
> Windows XP Clients we can not update or replace.
Ah, so the 2019 DC is still using the 2008 schema, I wasn't aware this
was allowed.
> Enum was for debugging purpose.
That is all they are fit for.

Rowland

Unfortunatly it did not fix it.
After "net cache flush" and a restart everything seemed ok.
Overnight the Group jumped back to 3008 and access was denied again. We
didn't monitor it though, so we do not know when it happened exactly.
It seems like it always starts on the RID-Range and then after some time
"falls down" to the tdb range.
getent passwd showed 1000513 yesterday as primary gid and today all users
changed to 3008.
This one group is only the most prominent, it happens to other groups and a few
users as well.




Mit freundlichen Gr??en / best regards,
Jochen Korge
Mobil +49 711 28695277

PCSM GmbH
Crailsheimerstrasse 15, 70435, Stuttgart
Tel.  +49 711 230 44 96
Fax  +49 711 230 44 97
Gesch?ftsf?hrer: Thomas Martin | Sitz der Gesellschaft: Stuttgart
Amtsgericht Stuttgart HRB-Nr.: 733394 / USt.-Idnr.: DE815181359



-----Urspr?ngliche Nachricht-----
Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland Penny
via samba
Gesendet: Donnerstag, 24. Februar 2022 21:40
An: sambalist <samba at lists.samba.org>
Betreff: Re: [Samba] inconsistend ID mapping with rid backend and ctdb

On Thu, 2022-02-24 at 20:18 +0000, Jochen Korge || PCSM GmbH
wrote:
> Thanks for the quick reply.
>
> I made the change regarding the netbios name yesterday. We got all IDs
> in the RID range. Today several "moved back" to the tdb range.
> Do I have to drop the tdb database? And if so, ctdb getdbmap shows
> several possible databases.
Try running 'net cache flush' on all cluster members, this should flush
the authentication database on each member.
>
> We joined a Domain with 2008 Schema and unfortunately we do have some
> Windows XP Clients we can not update or replace.
Ah, so the 2019 DC is still using the 2008 schema, I wasn't aware this was
allowed.
> Enum was for debugging purpose.
That is all they are fit for.

Rowland



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba