AD group quirk in publishing samba shares

TrueNAS General
1

Hi folks,

Loving our TrueNAS, but I am having trouble getting it to publish samba shares to Active Directory groups. A few notes:

  • Active Directory services is working and shows as healthy
  • Kerberos realms are properly autopopulating as expected
  • wbinfo -g and wbinfo -g at the shell shows all of our AD groups and users

When attempting to scroll down the list of groups on a samba share, though, I only see the built-in groups and none of the active directory ones.

The only meaningful error I can find in the logs is here:

/var/log/samba4/log.wb-DOMAIN

Which says ldb: Failed to connect to 'var/db/system/samba4/private/secrets.ldb’with backend ‘tdb’: Unable to open tdb ‘/var/db/system/samba4/private/secrets.ldb’: No such file or directory.

Any and all comments and suggestions welcome.

Thanks and warm regards,
Stu

2

This sounds like an idmap issue. Seeing the groups in wbinfo doesn’t mean the backend can convert them to proper NSS entries. Check output of getent group.