> Yes, I have.
> It's strange for me, that removed user isn't visible under usrmgr.exe as 
> members of  Domain Users (it's good), but when I do "slapcat", I can see:

So, why are you slapcatting?  The transactions hasn't been committed out
of the journal to the database.  DO NOT USE SLAPCAT TO CHECK DATA!!!
With slapcat your dodging the DSA.  Do an 'ldapsearch cn="Domain Users"'
and I'll wager you won't see the deleted users.

This may also by symptomatic that you haven't configured a checkpoint
value in slapd.conf

> cn    Domain Users
> gidNumber     513
> objectClass   posixGroup
> objectClass   sambaGroupMapping
> sambaGroupType        2
> sambaSID      S-1-5-21-1771745803-971260854-622856654-513
> description   Netbios Domain Users
> displayName   Domain Users
> memberUid     removed_user_1
> memberUid     removed_user_2
> memberUid     removed_user_3
> memberUid     removed_user_4
> memberUid     removed_user_5
> memberUid     removed_user_6
> memberUid     removed_user_7
> sambaSIDList
> userPassword

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to