[Samba] Samba ADS-member-server: FQDNs in /etc/hosts

[Rowland Penny]

On Tue, 11 Jul 2017 12:05:28 +0200
"Stefan G. Weichinger" <lists at xunil.at> wrote:

> Am 2017-07-11 um 11:57 schrieb Rowland Penny:
> 
> > Remove this local Unix group, you cannot have a group (or a user)
> > in AD and /etc/group
> 
> ok, done
> 
> > Probably because '11029' isn't a 'RID', it will be a uidNumber.
> > 
> > Try running this on your DC:
> > 
> > ldbsearch -H /path/to/sam.ldb -b "dc=secret,dc=at" -s sub
> > "(&(objectclass=group)(gidnumber=11029))"
> 
> 
> # Referral
> ref: ldap://secret.at/CN=Configuration,DC=secret,DC=at
> 
> # Referral
> ref: ldap://secret.at/DC=DomainDnsZones,DC=secret,DC=at
> 
> # Referral
> ref: ldap://secret.at/DC=ForestDnsZones,DC=secret,DC=at
> 
> # returned 3 records
> # 0 entries
> # 3 referrals
> 
> so not there ....

Try running this:

ldbsearch -H /path/to/sam.ldb -b "dc=secret,dc=at" -s sub
"(&(objectclass=user)(uidnumber=11029))"

This will check if it is a user.

Can you post the smb.conf from the DM (and the DC)

Rowland