RN 104 / OS 6.5 : AD group membership not synced for some users

Dear all,

I am a bit disappointed that noone offered a structured solution for this issue.

It seems that I was able to fix it myself. Here is what I did (please note that I lost the permissions on my shares ; this is not an issue since we know precisely what to set and how but otherwise it could have been a real problem) :

(Some steps are maybe totally useless but I list them anyway) 

• Set Authentication back to "local" 
• Reboot device
• Once the device is restarted, SSH to it and  :

  systemctl stop winbind
  systemctl stop smb
  
  net cache flush
  rm -f /var/lib/samba/*.tdb
  rm -rf /var/cache/samba/*
  
  systemctl start smb
  systemctl start winbind

• Reboot the device
• Once the device is restarted, in the Web Admin page, set Authentication to ADS again (with the standard options, i.e. "do not cache ADS accounts" NOT ticked
• Restart the device

--> Changes in group memberships reflected in the outputs of for instance "id -Gn <username>" within 5 minutes

--> AD syncs launched from the Web Admin page do not yield errors anymore, new groups and users are visible and usable in the UI (to set permissions etc...), and objects removed from the AD are also deleted

So, after months of despair, the 6.5.1 update finally seems to solve the AD issues and we can finally plan to use the device in production.

It's great that at my company we can wait 6 months or one year to implement projects we were supposed to finish within one week, it allowed us to wait "a bit" until a proper firmware is released !