samba - Apr 2023 - Unix Attributes not working as expected in a member server

On 27/04/2023 10:56, Luis Peromarta via samba wrote:
> Thanks Rowland, replaced as per the indication:
> 
> # Default ID mapping configuration for local BUILTIN accounts
> 
>          idmap config * : backend = tdb
>          idmap config * : range = 3000-7999
> 
> # idmap config for the MAD domain
> 
>          idmap config MAD : backend = ad
>          idmap config MAD : schema_mode = rfc2307
>          idmap config MAD : range = 10000-999999
> 
> # winbind config:
> 
>          idmap config MAD : unix_nss_info = yes
> #       winbind nss info = rfc2307
>          winbind use default domain = yes
> #       winbind enum users = yes
> #       winbind enum groups = yes
> 
> But still no luck.
> 
> getent passwd luis
> luis:*:10005:10000:Luis Peromarta:/home/MAD/luis:/bin/false
> 
Very strange, provided you are not using a very old version of Samba, 
that should have worked, but perhaps I should also have told you to run 
'net cache flush' as well, you could still be reading from the winbind 
cache there.

If that doesn't fix it it, run:

sudo samba-tool user show luis

And check if the attributes are there.

Rowland

Net cache flush did not work :(

samba-tool user show luis

This works on the DC, not on the member server. Attributes are there:

dn: CN=Luis Peromarta,OU=users_Otros,DC=mad,DC=mater,DC=int
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: Luis Peromarta
sn: Peromarta
givenName: Luis
instanceType: 4
whenCreated: 20180703164234.0Z
displayName: Luis Peromarta
uSNCreated: 5927
name: Luis Peromarta
objectGUID: b0c9f82a-38b1-4fd4-9d16-42804770e1e1
userAccountControl: 66048
codePage: 0
countryCode: 0
homeDrive: S:
pwdLastSet: 131799445562688800
primaryGroupID: 513
objectSid: S-1-5-21-2152908145-95474353-1514027631-1110
accountExpires: 0
sAMAccountName: luis
sAMAccountType: 805306368
userPrincipalName: luis at mad.mater.int
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=mad,DC=mater,DC=int
msNPAllowDialin: TRUE
unixUserPassword: ABCD!efgh12345$67890
uid: luis
msSFU30Name: luis
msSFU30NisDomain: mad
uidNumber: 10005
gidNumber: 10000
homeDirectory: \\server\personales\otros\luis
loginShell: /bin/bash
lastLogonTimestamp: 133263222073035850
unixHomeDirectory: /data/users/otros/luis
whenChanged: 20230427090315.0Z
uSNChanged: 673555
lastLogon: 133270628737122350
logonCount: 1495
distinguishedName: CN=Luis Peromarta,OU=users_Otros,DC=mad,DC=mater,DC=int


On 27 Apr 2023 at 12:10 +0200, samba at lists.samba.org,
wrote:
>
> run
> 'net cache flush' as well, you could still be reading from the
winbind
> cache there.
>
> If that doesn't fix it it, run:
>
> sudo samba-tool user show luis
>
> And check if the attributes are there.