Re: [gpfsug-discuss] Userid/groupid sync in trusted domains with winbind on two clusters with AFM DR relationship

[Christoph Martin]

Hi Pieter,

thanks for the useful hint. It helped partially.

Some uidnumbers are now in the correct range. Some others are not.


Is there a cache which has to be cleared to get it right?

regards
Christoph

Am 21.03.23 um 10:33 schrieb Pieter Adams:

All the groups are in the wrong range. And this is only on the node where I have used id or wbinfo in the past. The other node of the new cluster has the new mappings.

Hi,

you can compare the mapping between the 2 clusters:

/usr/lpp/mmfs/bin/net idmap dump | grep RANGE | sort



/usr/lpp/mmfs/bin/net idmap delete range 0
/usr/lpp/mmfs/bin/net idmap delete range 1
/usr/lpp/mmfs/bin/net idmap delete range 2

/usr/lpp/mmfs/bin/net idmap set range 0 S-1-5-.........
/usr/lpp/mmfs/bin/net idmap set range 1 ALLOC
/usr/lpp/mmfs/bin/net idmap set range 2 S-1-.........

We had an issue when migrating from Samba to CES, our domain had to be first (before ALLOC) to have the same uid mappings. We changed the order by deleting them and adding them in the correct order:

OpenPGP_signature
Description: OpenPGP digital signature

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at gpfsug.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org