2

So here's an odd one. We've had a user for years who happens to have a user id by local convention that matches a system account. So of course, I changed the users user ID in AD to avoid issues and security problems. However, having done so, some systems do not properly reflect the change, even a day later. Alarmingly, id username shows the old username with the correct id. The user is, of course, unable to log into this system. Even chown user:group on his home directory reflects the old user id. Anyone ever run into this before?

1

So, as it turns out, winbind's cache was stale. I'm not sure how to set that to refresh more often, which is what I would prefer for a solution, but I found that the following was effective in fixing the issue:

Note: This is a CentOS 5.x system. Adjust as necessary for your OS.

/sbin/service winbind stop
/sbin/service smb stop
/usr/bin/net cache flush
/bin/rm -f /var/lib/samba/*.tdb
/bin/rm -f /var/lib/samba/group_mapping.ldb
/sbin/service smb start
/sbin/service winbind start

Run as root, or preface with sudo.

  • 1
    I'm curious... Are you using nscd as well? Either way, did you try net cache flush from the affected host? – ewwhite Oct 22 '15 at 9:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.