Why are AD users unable to list all its group with id command after upgrading to samba version 3.6.23-52?

Solution Verified - Updated -

Environment

  • Red Hat Enterprise Linux 6 (RHEL 6)
  • samba-3.6.23-52.el6_10.x86_64

Issue

  • Unable to list all the groups of AD users with id command after the latest upgrade.

Resolution

  • This is a known issue. It is being tracked under Red Hat Private Bugzilla 1743358. Open a service ticket for more information on it through Red Hat Customer Portal.

  • Currently, the workaround is for this, is to downgrade the samba packages to the previous version

# yum downgrade samba-common samba-winbind samba-winbind-clients samba-client samba libsmbclient -y

Diagnostic Steps

Actual results:

# date; id ad_user1; date
uid=10058478(ad_user1) gid=10000513(domain users) groups=10000513(domain users)

Expected results:

# id ad_user1
uid=10058478(ad_user1) gid=10000513(domain users) groups=10000513(domain users),10033148(group1),10035380(group2),10035373(group4),10035377(group5),10032118(group6),10043655(group7),10035381(group8),10061385(group9)

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

Comments