[Samba] Samba lost group memberships

Pluess, Tobias tpluess at ieee.org
Wed Nov 12 09:29:34 UTC 2025


Hello list,
since today, I encounter this interesting problem.

System: Debian 13 with smb Version 4.22.4-Debian-4.22.4+dfsg-1~deb13u1
I am using the "ad" backend.

It works in the sense that the IDs of users can be retrieved:

id <username> returns a valid ID and works. However it takes long time for
the command to complete.
I get something like this

# id <myusername>
uid=5486(tp18v123) gid=1080
groups=1080,513,8252,103474,8319,103464,102704,1905,103074,8324,100494,10374,5505,9295,7646,10375,6022,8735,5556,8656,9158,5855,2080,8255,2089,6020,102789,104387,8627,9291,8483,7682,10456,6614,8386,10000001(BUILTIN\users)

so all the groups vanished and only their group IDs are visible.

I can use

# getent passwd <username>
and some sensible info is retrieved, it seems to recognise the account, but
also here, the group memberships are gone and replaced just by their ID.

# getent group

gives no info at all. If I try to manually mount a share with

mount -t cifs //server/share /mnt/temp -o
vers=3,user=<myusername>,domain=<domain>

it appears that the access is denied. I see in the log files errors

check_account: Failed to convert SID
S-1-5-21-1442852101-4018948630-3783845812-142435 to a UID

and

parse_dfs_path_strict: Hostname is not ours.

Where should I start looking?


More information about the samba mailing list