Re: [Samba] samba + ads / user and group update-probem

On Mon, Aug 18, 2008 at 02:13:10PM +0200, Anian Wurzenberger wrote:
> we have a problem with keeping our group memberships up to
> date. If we e.g. remove a group membership from a user, we
> don´t see any change when trying "wbinfo -r j.doe" or
> "groups j.doe". Even after hours there ist no update. We
> also tried restarting smb, nmb, winbindd.
>
> Anyone has an idea?

Does it still fail if j.doe logs in? If that one fixes it,
then you see effects of the netsamlogon_cache.tdb.

Volker

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFIqWrbUzqjrWwMRl0RAgqhAJ42VEhsCWQpM48wwL4Poj 8R3y1lUACgnCDx
YDNdhOnmzeanTweKw1VUNzk=
=gdjD
-----END PGP SIGNATURE-----

Thank you for your answer. Where should the user log in? Into a share? Into an AD-connected Computer?

Anian


-----Original Message-----
From: Volker Lendecke [mailto:Volker.Lendecke@SerNet.DE]
Does it still fail if j.doe logs in? If that one fixes it, then you see effects of the netsamlogon_cache.tdb.

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

On Mon, Aug 18, 2008 at 03:41:50PM +0200, Anian Wurzenberger wrote:
> Thank you for your answer. Where should the user log in?
> Into a share? Into an AD-connected Computer?

For example into a share. Anthing that makes Samba
authenticate against the DC.

Volker

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFIqdy7UzqjrWwMRl0RAmpbAKCZCA3DsW80b/QVzatfamdQgFvuIQCeIFdo
G5gDM5PYJ0NchyEtOrRmbXQ=
=xsvx
-----END PGP SIGNATURE-----

Hi Volker,
now that we´re running winbindd with -n that seems to help. I thought that wbinfo would access AD to authenticate when winbindd is running without caching, but apparently it doesn´t.
Thank you for your help.

Anian


-----Original Message-----
From: Volker Lendecke [mailto:Volker.Lendecke@SerNet.DE]
Sent: Montag, 18. August 2008 22:34
To: Anian Wurzenberger
Cc: samba@lists.samba.org
Subject: Re: [Samba] samba + ads / user and group update-probem

On Mon, Aug 18, 2008 at 03:41:50PM +0200, Anian Wurzenberger wrote:

> Thank you for your answer. Where should the user log in?
> Into a share? Into an AD-connected Computer?


For example into a share. Anthing that makes Samba authenticate against the DC.

Volker
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba