[Samba] Winbind / Samba auth problem after username change

[Julian Zielke]

Well we've changed the logon name (SAMAccountName) and the Name and Surname of the user object.

-----Ursprüngliche Nachricht-----
Von: Rowland Penny [mailto:rpenny at samba.org]
Gesendet: Dienstag, 6. September 2016 11:37
An: samba at lists.samba.org
Cc: Julian Zielke <jzielke at next-level-integration.com>
Betreff: Re: [Samba] Winbind / Samba auth problem after username change

On Tue, 6 Sep 2016 09:15:09 +0000
Julian Zielke via samba <samba at lists.samba.org> wrote:

> Hi Mathias,
>
> thanks for your advice on how to use getent. However you’re mentioning
> SSSD which is working fine. I was referring to it because we changed
> to that method lately but the server having the problem is NOT using
> this new method but the old winbind+samba combination.
>
> Sorry it it was confusing.
>
> Cheers,
> Julian

If you are using a fairly recent version of sssd, you are using a version of a Samba winbind lib, so just changing to sssd shouldn't give problems.

First and foremost, all your users & groups are stored in AD as windows users & groups i.e. they have a SID-RID So if you change a login name, it shouldn't affect anything else, so when I asked how you changed the login name, perhaps I should have asked, what did you change ?

Rowland
Wichtiger Hinweis: Der Inhalt dieser E-Mail ist vertraulich und ausschließlich für den bezeichneten Adressaten bestimmt. Wenn Sie nicht der vorgesehene Adressat dieser E-Mail oder dessen Vertreter sein sollten, so beachten Sie bitte, dass jede Form der Kenntnisnahme, Veröffentlichung, Vervielfältigung oder Weitergabe des Inhalts dieser E-Mail unzulässig ist. Wir bitten Sie, sich in diesem Fall mit dem Absender der E-Mail in Verbindung zu setzen. Wir möchten Sie außerdem darauf hinweisen, dass die Kommunikation per E-Mail über das Internet unsicher ist, da für unberechtigte Dritte grundsätzlich die Möglichkeit der Kenntnisnahme und Manipulation besteht

Important Note: The information contained in this e-mail is confidential. It is intended solely for the addressee. Access to this e-mail by anyone else is unauthorized. If you are not the intended recipient, any form of disclosure, reproduction, distribution or any action taken or refrained from in reliance on it, is prohibited and may be unlawful. Please notify the sender immediately. We also would like to inform you that communication via e-mail over the internet is insecure because third parties may have the possibility to access and manipulate e-mails.