samba - Aug 2022 - unix_primary_group not used when writing files

On 8/18/22 11:00, Matthew Richardson via samba wrote:
>> So, what I think, the primary GroupID isnt changed from "domain
>> users" to g_alice in the AD. Or you hitting cache problem;  try
>> also : net cache flush
> 
> Caches flushed, services (and server) restarted - no change.
did you change the config to you the unix_primary_group after users had 
been using the system before? Samba caches user tokens as part of the so 
calles samlogon cache.

net cache samlogon {list|delete}

is your friend here.

Besides that, can the gid be resolved? Ie is it actually set as gid of a 
some group in AD? Not sure if this has already been discussed in this 
thread...

-slow

-- 
Ralph Boehme, Samba Team                 https://samba.org/
SerNet Samba Team Lead      https://sernet.de/en/team-samba
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20220818/06223da7/OpenPGP_signature.sig>

Thanks Ralph on this  

Never knew about this one, but I do have a few small questions .. 

So this does not clean out, deleted users?  (* like removed (few) years ago I
see.. ).
if I see users that are still working but are'nt getting updated in cache,
is that normal?

Im asking because I see, people working and getting there cache updated and few
not.
before I start cleaning up.. I see lots of very old user that don?t belong in
there anymore.

Greetz, 

Louis
> -----Oorspronkelijk bericht-----
> Van: samba <samba-bounces at lists.samba.org> Namens Ralph Boehme via
> samba
> Verzonden: donderdag 18 augustus 2022 11:37
> Aan: Matthew Richardson <m.richardson at ed.ac.uk>;
> samba at lists.samba.org
> Onderwerp: Re: [Samba] unix_primary_group not used when writing files
> 
> On 8/18/22 11:00, Matthew Richardson via samba wrote:
> >> So, what I think, the primary GroupID isnt changed from
"domain
> >> users" to g_alice in the AD. Or you hitting cache problem; 
try also
> >> : net cache flush
> >
> > Caches flushed, services (and server) restarted - no change.
> 
> did you change the config to you the unix_primary_group after users had
> been using the system before? Samba caches user tokens as part of the so
> calles samlogon cache.
> 
> net cache samlogon {list|delete}
> 
> is your friend here.
> 
> Besides that, can the gid be resolved? Ie is it actually set as gid of a
some
> group in AD? Not sure if this has already been discussed in this thread...
> 
> -slow
> 
> --
> Ralph Boehme, Samba Team                 https://samba.org/
> SerNet Samba Team Lead      https://sernet.de/en/team-samba