[Samba] New group membership not taken into account on member servers

[Hans-Kristian Bakke]

When I get issues like that (membership correctly displayed with
getent group, but not in groups <user>), I usually have to delete the
netsamlogon_cache.tdb (I could just delete the user in question to
force refresh to avoid restarting winbind, but that is more of an
hassle)

service winbind stop
rm /var/cache/samba/netsamlogon_cache.tdb
service winbind start

It doesn't really help to login again to refresh the users group
membership. It seems to be stuck, even for days, until I do this.

Hans-Kristian

On 5 October 2014 11:46, steve <steve at steve-ss.com> wrote:
> On 05/10/14 11:04, Sébastien Le Ray wrote:
>>
>>
>> Le 05/10/2014 10:22, steve a écrit :
>>>
>>> There was the other suggestion of using id or a login and all the
>>> wbinfo stuff. All force an ldap lookup, but I think you've already
>>> tried them.
>>
>>
>> Yes, id someuser is wrong, getent passwd is wrong, wbinfo -r is wrong
>> wbinfo --group-info is good :)
>>
>
> If all else fails, there's always the winbind-or-bust check-list:
> http://linuxcostablanca.blogspot.com.es/2014/06/samba4-winbind-desperation.html
>
> Don't forget the links, e.g. for 32 bit:
> ln -s /usr/local/samba/lib/libnss_winbind.so /lib
> ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2
> ldconfig
>
> HTH,
> Steve
>
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba