Project

General

Profile

Bug #10196

Account Unknown(SID) showing in Windows Security tab

Added by Matt D over 5 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
Important
Assignee:
John Hixson
Category:
OS
Target version:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
Yes
Needs Doc:
Yes
Needs Merging:
Yes
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:
ChangeLog Required:
No

Description

I just installed FreeNAS-9.3-STABLE-201506042008 two days ago. I created several groups in FreeNAS and applied those groups to volumes/dataset groups. At first the group name was resolved in Windows 7 and 8.1. Today, after a FreeNAS reboot, the group names no longer resolve and it shows Account Unknown(SID). I tried to create a new group and dataset but the same thing happens. I also can't search for groups in Windows anymore. No FreeNAS groups or users show in Windows search. It's also worth noting that the SID does not match the Group ID...not sure if that's an issue.

Security_box.PNG (25.5 KB) Security_box.PNG Matt D, 06/14/2015 05:35 PM
3105

Associated revisions

Revision ef24f8bd (diff)
Added by John Hixson about 5 years ago

Keep SID consistent - The SID was changing when the system dataset was changing, undestandabl so - The SID was also changing as soon as an smb4.conf existed - Set the SID back to a known state when these things occur Ticket: #10196

Revision 1b70e76b (diff)
Added by John Hixson about 5 years ago

Keep SID consistent - The SID was changing when the system dataset was changing, undestandabl so - The SID was also changing as soon as an smb4.conf existed - Set the SID back to a known state when these things occur Ticket: #10196 (cherry picked from commit ef24f8bd6c8b60ffbd1d16c378cc2b38bee3a209)

Revision 41c76c31 (diff)
Added by John Hixson about 5 years ago

Keep SID consistent - The SID was changing when the system dataset was changing, undestandabl so - The SID was also changing as soon as an smb4.conf existed - Set the SID back to a known state when these things occur Ticket: #10196 (cherry picked from commit ef24f8bd6c8b60ffbd1d16c378cc2b38bee3a209)

History

#1 Updated by Matt D over 5 years ago

  • File ixdiagnose.tgz added

#2 Updated by Matt D over 5 years ago

3105

#3 Updated by John Hixson over 5 years ago

  • Status changed from Unscreened to 15
  • Target version set to Unspecified

Was this a fresh install? upgrade? Did you import disks at all? It's very clear that the SID has changed.

#4 Updated by Matt D over 5 years ago

This was a fresh install on new hardware. I still have my other box that is running 9.1. Did not import disks.

#5 Updated by John Hixson over 5 years ago

  • Status changed from 15 to Investigation

Matt D wrote:

This was a fresh install on new hardware. I still have my other box that is running 9.1. Did not import disks.

I've gotten a couple of other reports of the same thing. I think there is a regression here and I'm going to track it down this week.

#6 Updated by John Hixson over 5 years ago

I'm able to reproduce the SID problem. I'll report back once I've found the reason why and have a fix.

#7 Updated by John Hixson over 5 years ago

The issue is the samba4 directory on the system dataset keeps getting recreated. Looking into why.

#8 Updated by Matt D over 5 years ago

Just want to add, that after a server reboot, if you turn CIFS off and back on it resolves the issues. But it's a manual process. And happens everytime.

#9 Updated by John Hixson over 5 years ago

Matt D wrote:

Just want to add, that after a server reboot, if you turn CIFS off and back on it resolves the issues. But it's a manual process. And happens everytime.

Thanks Matt,

I've identified the issue already. I'm sorting out the how/why, at which point I will develop a fix for it.

#10 Updated by John Hixson over 5 years ago

I'm still working on this.

#11 Updated by Matt D about 5 years ago

Great, I appreciate it!

#12 Updated by John Hixson about 5 years ago

  • Status changed from Investigation to 15

Matt,

I believe I have fixed this. Can you confirm? See ef24f8bd6c8b60ffbd1d16c378cc2b38bee3a209. You can manually path your system running the following commands from the command line as root:

fetch https://raw.githubusercontent.com/freenas/freenas/master/src/freenas/usr/local/libexec/nas/generate_smb4_conf.py -o /root/generate_smb4_conf.py
cp /usr/local/libexec/nas/generate_smb4_conf.py /usr/local/libexec/nas/generate_smb4_conf.py.bak
cp /root/generate_smb4_conf.py /usr/local/libexec/nas/generate_smb4_conf.py

reboot

#13 Updated by Matt D about 5 years ago

John, I backed up the original and replaced with the fix but now I can't login to any of my CIFS shares. I tried resetting passwords and reapplying permissions to a dataset but still wasn't able to authenticate to the CIFS share. Any thoughts? Was there something else I needed to do?

#14 Updated by John Hixson about 5 years ago

Matt,

Do you have time for a teamviewer session?

#15 Updated by Matt D about 5 years ago

Sorry John, just getting this now. I'm at work until 5ish EST. Are you available this evening?

#16 Updated by John Hixson about 5 years ago

Matt D wrote:

Sorry John, just getting this now. I'm at work until 5ish EST. Are you available this evening?

Hi Matt,

I sure am. What time will work for you?

#17 Updated by Matt D about 5 years ago

I'm free the rest of the night. I'll be watching for your reply.

#18 Updated by John Hixson about 5 years ago

Matt D wrote:

I'm free the rest of the night. I'll be watching for your reply.

Are you available now? If so, can you email me your info?

#19 Updated by Matt D about 5 years ago

Email sent.

#20 Updated by John Hixson about 5 years ago

  • Status changed from 15 to Screened

Fixed my borked up patch and confirmed working with Matt.

#21 Updated by John Hixson about 5 years ago

  • Status changed from Screened to Ready For Release

#22 Updated by Jordan Hubbard about 5 years ago

  • Priority changed from No priority to Important

#23 Updated by Jordan Hubbard about 5 years ago

  • Status changed from Ready For Release to Resolved

#24 Avatar?id=14398&size=24x24 Updated by Kris Moore about 4 years ago

  • Target version changed from Unspecified to N/A

#25 Updated by Dru Lavigne about 3 years ago

  • File deleted (ixdiagnose.tgz)

#26 Updated by Dru Lavigne about 3 years ago

  • Private changed from Yes to No

Also available in: Atom PDF