[Samba] new users not seen with getent passwd

[Stefan Kania]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

I migrated a samba3 with openLDAP to Samba 4 (sernet package 4.13). I
can see all migrated users on all DCs and fileservers with "wbinfo -u"
and "getent passwd" and all informations for a single user with
"getent passwd <username>" and "wbinfo -i <username>".

Now, after migration, if I create a new user, I can see the new user
in the list of "wbinfo -u" on all systems. BUT I can only see the
information with "wbinfo -u <newuser>" and "getent passwd <newuser> on
the two DCs but not on the fileserver.
The new user also not appears in the list when in use "getent passwd"
on the fileserver.
If I do a "getent passwd <newuser>" I get a empty line. If I do a
"wbinfo -i <newuser>" I get the following:
- ---------
root at SVL-V-5:~# wbinfo -i ntd\\stka
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user ntd\stka
- ---------
For an migrated user I see the following:
- ---------
root at SVL-V-5:~# wbinfo -i ntd\\bila
NTD\bila:*:103216:100513:bila:/home/NTD/bila:/bin/bash
- ---------

Here is the global-part of smb.conf of the fileserver:
- ----------
[global]
        workgroup = NTD
        realm = EGF.NTD
        security = ADS
        wins server = 192.168.0.230
        registry shares = Yes
        template shell = /bin/bash
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind refresh tickets = Yes
        idmap config ntd : backend = rid
        idmap config ntd : range = 100000-199999
        idmap config * : range = 1000000-1999999
        idmap config * : backend = tdb
        map acl inherit = Yes
        store dos attributes = Yes
        vfs objects = acl_xattr

- ----------

A "chown <newuser> <file> is also not possible. With existing users it
works.


I tried to clear the cache with "net cache flush" and nothing changed.

What can I do next?


Thanks

Stefan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlRbPeUACgkQ2JOGcNAHDTZTfwCfbOMs4xEjFlJuxK2KLI7GKfRH
Q/IAoMMqgCFyp0N+5olm+BomrRm789YJ
=O4Uy
-----END PGP SIGNATURE-----