NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

cs_giuseppe's avatar
cs_giuseppe
Apprentice
May 25, 2017
Solved

Change Samba idmap with AD

Hi   I have a nas that was installed long ago with a firmware pre 6.5 and then upgraded to the last, with this nas the idmap with ad is different that one started with a recent firmware. It's poss...
File Sharing
  • cs_giuseppe's avatar
    cs_giuseppe
    Jun 01, 2017

    Hi,

     

    SOLVED !!!

     

    here the step

     

    • Switch from AD to Local users. 
    • NEW - Disabled samba in each share
    • Wipe the permissions under File access tab / reset of each shares settings section.
    • Edit /etc/samba/smb.conf to replace tdb by: rid
    • Execute: net cache flush
    • NEW - Reboot
    • Join AD with "trusted domain" unchecked.

    After these steps now idmap use rid.

     

    Thank for all suggestions

     

     

jak0lantash's avatar
jak0lantash
Mentor
May 28, 2017

Please confirm if these are the steps you followed:

 

cs_giuseppe's avatar
cs_giuseppe
Apprentice
May 31, 2017

Hi

 

I made all on the test nas:

 

  • Switch from AD to Local users. 
  • Wipe the permissions under File access tab / reset of each shares settings section.
  • Edit /etc/samba/smb.conf to replace tdb by: rid
  • Execute: net cache flush
  • Join AD with "trusted domain" unchecked.

but nothing, still tdb

 

I founf when the problem arise, with fw 6.5.0 there are problem with ad auth and I check 'trusted domian' this set the tdb and now even is uncheced no rid.

 

 

  • jak0lantash's avatar
    jak0lantash
    Mentor
    May 31, 2017

    Before 6.5.0, it used tdb.

    Since 6.5.0, if trusted domain is unchecked, it uses rid.

    Since 6.5.0, if trusted domain is checked, it uses tdb.

    Once it starts using tdb, the GUI doesn't allow you to switch back to rid.

  • cs_giuseppe's avatar
    cs_giuseppe
    Apprentice
    Jun 01, 2017

    Hi,

     

    SOLVED !!!

     

    here the step

     

    • Switch from AD to Local users. 
    • NEW - Disabled samba in each share
    • Wipe the permissions under File access tab / reset of each shares settings section.
    • Edit /etc/samba/smb.conf to replace tdb by: rid
    • Execute: net cache flush
    • NEW - Reboot
    • Join AD with "trusted domain" unchecked.

    After these steps now idmap use rid.

     

    Thank for all suggestions

     

     

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More