SID Compression and member servers ...

Richard Sharpe realrichardsharpe at gmail.com
Mon Jun 16 11:00:15 MDT 2014


On Mon, Jun 16, 2014 at 9:56 AM, Hemanth Thummala
<hemanth.thummala at gmail.com> wrote:
> I haven't tested with directory access. But I have verified through the log
> that all group information(including domain local group) is retrieved  and
> updated netsamlogon_cache.tdb correctly. Will also verify using directory
> access.

The issue is that the netsamlogon_cache.tdb is really only for display purposes.

However, it is enough to verify that the token contains the correct
groups, IMO. You can do this with a log level 10. The groups in the
token are printed out from time to time.

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)


More information about the samba-technical mailing list