[Samba] File Server member DC ACL permissions

[Rowland Penny]

On Thu, 11 Aug 2016 21:14:55 +0100
Rowland Penny via samba <samba at lists.samba.org> wrote:

> On Thu, 11 Aug 2016 19:51:07 +0000 (UTC)
> Ricardo Pardim Claus via samba <samba at lists.samba.org> wrote:
> 
> > 
> > 
> >  
> > Follow the answers:
> > 
> > 
> > > Yes wbinfo shows the user but does 'getent passwd iuser' show
> > > anything ?
> > 
> > # wbinfo -i iuser 
> > iuser:*:4294967295:4294967295:iuser:/home/DOMAIN/iuser:/bin/false 
> > 
> > 
> > 
> > # getent passwd iuser 
> > iuser:*:4294967295:4294967295:iuser:/home/DOMAIN/iuser:/bin/false 
> > 
> > 
> > # id iuser 
> > id: iuser: no such user
> 
> Hmm, the numbers seem extremely large, did you set this number in the
> users 'uidnumber' attribute in AD ?

concentrating on the number, I missed
'/home/DOMAIN/iuser:/bin/false'

Is this on the DC ?
and if so, what do get if you run the same command on the fileserver ?

Just to double check, are you running sssd on any of the machines ?

Rowland