[Samba] User disappears, when enabling RC2307

[steve]

On Fri, 2014-08-08 at 22:35 +0100, Rowland Penny wrote:
> On 08/08/14 22:10, Lars Hanke wrote:
> >>> I copied the idmap entries from another client, which perfectly maps
> >>> the users:
> >>>
> >>> root at nfs4:/# id mgr
> >>> uid=1001(mgr) gid=10000(domain_users)
> >>> Gruppen=10000(domain_users),30001(BUILTIN\users)
> >>>
> >>> Yes, the user has uid and uidNumber set properly.
> >> uid and uidNumber are different, uid is the users name, uidNumber is the
> >> users ID number, is this how you have them set ?
> >
> > Understood. uid is identical to sAMAccountName, and uidNumber is 1001. 
> > As said, it works nice on a second client.
> >
> >> OK, you have added the users with their original ID numbers to AD, but
> >> have you
> >> a) removed all the users from /etc/passwd
> >
> > They never existed on the NAS. There is no uid 1001 on the NAS. There 
> > are however default users, which fall into the range, but do not clash 
> > with any number existing in the AD. I'm not yet sure how to deal with 
> > these default accounts.
> 
> Just what default users? can you post the smb.conf from the NAS ?
Hi
Did we ever get smb.conf from the NAS? It's not usually in /etc. e.g. on
synology it's at /usr/syno/etc/smb.conf
You can enable SSH and have a look, but (with synology at least) any
changes you make to it will be overwritten back to what's in the ROM on
reboot. If you fancy googling, it may turn up.

> > I did that on the DSM GUI and it reported success. But I don't know 
> > what it did under the hood. Is there any way to verify whether the 
> > join was successful?
> 
> Can you get to a terminal on the NAS, if so you could run 'net ads testjoin'
I don't think you'll be able to. You can usually only do what the control panel allows. If the OP has joined from DSM, the fact that it allows you to do so should be good enough. It's then a case of checking for the machine account having been created back on the DC. NAS' can be a real pain.

HTH,
Steve



> Rowland
> 
> >
> > Regards,
> >  - lars.
>