[Samba] Winbind / Samba auth problem after username change

[mathias dufresne]

sAMAccountName has no impact in group membership (which uses CN).

Perhaps the "net cache flush" has to be performed on DC too. I mean on all
ALL DC too. Could you try that?

2016-09-06 12:58 GMT+02:00 Julian Zielke via samba <samba at lists.samba.org>:

> Well we've changed the logon name (SAMAccountName) and the Name and
> Surname of the user object.
>
> -----Ursprüngliche Nachricht-----
> Von: Rowland Penny [mailto:rpenny at samba.org]
> Gesendet: Dienstag, 6. September 2016 11:37
> An: samba at lists.samba.org
> Cc: Julian Zielke <jzielke at next-level-integration.com>
> Betreff: Re: [Samba] Winbind / Samba auth problem after username change
>
> On Tue, 6 Sep 2016 09:15:09 +0000
> Julian Zielke via samba <samba at lists.samba.org> wrote:
>
> > Hi Mathias,
> >
> > thanks for your advice on how to use getent. However you’re mentioning
> > SSSD which is working fine. I was referring to it because we changed
> > to that method lately but the server having the problem is NOT using
> > this new method but the old winbind+samba combination.
> >
> > Sorry it it was confusing.
> >
> > Cheers,
> > Julian
>
> If you are using a fairly recent version of sssd, you are using a version
> of a Samba winbind lib, so just changing to sssd shouldn't give problems.
>
> First and foremost, all your users & groups are stored in AD as windows
> users & groups i.e. they have a SID-RID So if you change a login name, it
> shouldn't affect anything else, so when I asked how you changed the login
> name, perhaps I should have asked, what did you change ?
>
> Rowland
> Wichtiger Hinweis: Der Inhalt dieser E-Mail ist vertraulich und
> ausschließlich für den bezeichneten Adressaten bestimmt. Wenn Sie nicht der
> vorgesehene Adressat dieser E-Mail oder dessen Vertreter sein sollten, so
> beachten Sie bitte, dass jede Form der Kenntnisnahme, Veröffentlichung,
> Vervielfältigung oder Weitergabe des Inhalts dieser E-Mail unzulässig ist.
> Wir bitten Sie, sich in diesem Fall mit dem Absender der E-Mail in
> Verbindung zu setzen. Wir möchten Sie außerdem darauf hinweisen, dass die
> Kommunikation per E-Mail über das Internet unsicher ist, da für
> unberechtigte Dritte grundsätzlich die Möglichkeit der Kenntnisnahme und
> Manipulation besteht
>
> Important Note: The information contained in this e-mail is confidential.
> It is intended solely for the addressee. Access to this e-mail by anyone
> else is unauthorized. If you are not the intended recipient, any form of
> disclosure, reproduction, distribution or any action taken or refrained
> from in reliance on it, is prohibited and may be unlawful. Please notify
> the sender immediately. We also would like to inform you that communication
> via e-mail over the internet is insecure because third parties may have the
> possibility to access and manipulate e-mails.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>