[K12OSN] SMB/LDAP Groups Issue

[Jason Ingalls]

Hi, me again.

This issue has continued to cause all kinds of havoc here. Seemingly randomly
certain users lose their group memberships (according to Windows). Some users
will be fine, others will be broken.. at the same time. My account seems to
always work fine, but it was created in the same way as my boss' account which
continues to have trouble. We even went as far as to delete his account and
home dir and recreate them, but it only worked for an hour or so an was broken
again when I left work this afternoon.

This afternoon we went ahead and upgraded samba thinking our version was old
enough to have some bugs (3.0.10 to 3.0.14). No change.


We are looking for ANY help on this issue. We are running NSCD, but a 
restart of
NSCD doesn't change anything. Nor does a reboot of the entire server.

Thanks,

-- 
Jason Ingalls
Ellsworth School Department
IT Specialist
207-667-4722 Ext. 5529
jingalls (at) ellsworthschools.org


Quoting Les Mikesell <les at futuresource.com>:

> On Fri, 2005-07-15 at 09:21, Jason Ingalls wrote:
>
>> A few minutes ago we just noticed that everything started working. 
>> My account
>> lost admin privs (we took it out of the group this morning) and my boss
>> started
>> working. As soon as I added my account back into Domain Admins I
>> immediately had
>> admin rights (seemingly ruling out some soft of propigation delay). So
>> right now
>> everything appears to be working normally... but I'm unsure if the
>> problem will
>> reappear.
>
> Are you running nscd (name service caching daemon)?  I've seen it
> cause similar problems even with local passwd/group file changes.
> I run it to reduce the traffic on a backend smb authentication
> and have to 'service nscd restart' to make changes take effect
> immediately.
>
> --
>  Les Mikesell
>   les at futuresource.com
>
>
> _______________________________________________
> K12OSN mailing list
> K12OSN at redhat.com
> https://www.redhat.com/mailman/listinfo/k12osn
> For more info see <http://www.k12os.org>
>



----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.