[Samba] Odd behavior on group membership

Marcio Vogel Merlone dos Santos marcio.merlone at a1.ind.br
Tue Nov 27 18:39:41 UTC 2018


Hi,

I have a samba 4.7 AD DC running on a Ubuntu 18.04 server with distro 
packages. I update a user with a new group and this new membership is 
not reflected on that user. On example below, I can successfully add the 
user "test.account" to group "test", but not my user "marcio.merlone":

root at araucaria:~# id test.account
uid=30214(A1\test.account) gid=100(users) 
groups=100(users),3000008(BUILTIN\users)
root at araucaria:~# samba-tool group addmembers test test.account
Added members to group test
root at araucaria:~# id test.account
uid=30214(A1\test.account) gid=100(users) 
groups=100(users),3000203(A1\test),3000008(BUILTIN\users)

User test.account was added successfully to group test. Although:

root at araucaria:~# samba-tool group addmembers test marcio.merlone
Added members to group test
root at araucaria:~# id marcio.merlone
uid=1014(A1\marcio.merlone) gid=100(users) 
groups=100(users),512(A1\domain 
admins),3000008(BUILTIN\users),10012(BUILTIN\administrators)
root at araucaria:~#

Group "test" does not show up. Also tried changing groups using ADUC and 
LDAP Account Manager, no diff.

Those tests where made on DC for debugging purposes, but I need this 
membership change reflected on a member server running squid proxy. 
Tracked down to DC not working as expected also. Same happens when 
removing a group membership.

Already tried net cache flush, winbind + smbd + nmbd restart, removing 
tdb files from /var/lib, no luck.

Any thoughts?

-- 
*Marcio Merlone*


More information about the samba mailing list