[Samba] security = ads parameter not working in samba 4.9.5

[Rowland penny]

On 28/11/2019 20:26, Sérgio Basto wrote:
> On Thu, 2019-11-28 at 20:09 +0000, Rowland penny via samba wrote:
>> On 28/11/2019 20:01, Sérgio Basto wrote:
>>> This recommendation , why ? wiki say to add it [1]
>>> [1]
>>> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Enable_Extended_ACL_Support_in_the_smb.conf_File
>> Yes, but under it, in a bright orange warning box, it says this:
>>
>> On a Samba Active Directory (AD) domain controller (DC), extended
>> ACL
>> support is automatically enabled globally. You must not enable the
>> support manually.
>>
>>> I tried these fixed , but noting change getent passwd and getent
>>> group
>>> stops to work soon as I change change /etc/samba/smb.conf with
>>> WORKGROUP
>>>
>> Did you make all the changes on the DCs that I suggested ?
> yes

OK, then run the script you downloaded, on the Unix domain member and 
paste the output in to a post here.

Rowland