CallOneTech

First, thank you to everyone for contributing to this thread so far. There is 100% something funky under the hood regarding the AD integration and samba in general. I came to the same conclusion as Brianara3 and mouseskowitz about needing to reboot the server to rejoin AD. However, restarting the server just for the sake of regaining the ability to leave and rejoin the domain isn't a proper fix. Without a clear cause as to why the connection with AD failed, we are just waiting for it to randomly break again. Please post back on this thread the next time your connection breaks, and maybe we can start to identify a pattern. For all we know, this bug could be time-based, like a jug of milk.

Frank1940, Sorry if I was unclear. I was trying to say I could NOT find the scripts and was asking for an example of any such script to manage the AD related stuff via terminal that I can study.

As the topic states, I'm trying to manually join and verify AD domain membership via the terminal. There seems to be a bug in the web GUI that doesn't allow you to leave a domain. I also have a feeling it is in some strange stuck state that could easily be proven or disproven with manual testing in the terminal. I have seen posts mentioning doing exactly what I am attempting with scripts, but I haven't seen any examples of exactly how it was done. I always could dig through the code to see how the web GUI button works, but I was really hoping to avoid doing that if possible.

Glad to see this isn't just an isolated issue I'm having. I'm starting to think this is a a legit bug in need of fixing... I was hoping to hear a little more helpful feedback from folks that focus more on the AD integration features. Hopefully if we make enough noise we can get some official input on why the AD/file permissions side of things is so buggy. My plan is to take another deep dive into this issue today and I'll try my best to share my findings in this thread until it gets the attention it needs for a resolution.

Did you ever find a solution? I'm also having AD related permissions issues. All the forum posts I have found so far lead to dead ends, so I figured if I shake enough trees something might just fall out 🤷‍♂️

Sorry to dig up this old post, but how did you go about joining the domain from the terminal? I'm having a domain related issue and I believe that may help.

Summary: I noticed some seemly random issues with my SMB shares since updating from 6.9 to 6.10.2. The latest example is losing access to a media share in the span of 6 hours after making no changes to any systems. It literally worked at 3am, I went to sleep, I then woke up and found I had lost access to the SMB share. Bizarre stuff... Log entries (identifying info removed): [2022/06/10 12:02:55.282902, 0] ../../source3/auth/auth_util.c:1927(check_account) Jun 10 12:02:55 unraid smbd[2715]: check_account: Failed to convert SID S-###removed### to a UID (dom_user[DOMAIN\username]) Troubleshooting: left and rejoined the domain via the UNRAID web GUI Verified AD health (Repadmin /replsummary and DCDiag /Test:DNS /e /v) all tests passed Verified no errors in domain controller event logs Rebooted client computer (standard window access denied error: \\unraid is not accessible. You might not have permission.. blah blah...) Restarted UNRAID array (while leaving and rejoining AD in web GUI) I'm fine with things breaking after changes or updates, but it's annoying when things randomly crap out like a jug of bad milk. I'm happy to take any suggestions or post any additional information/logs. EDIT #1 After sinking more time into this issue I believe I narrowed it down to UNRAID not being able to successfully communicate with AD. The check_account entry appears with the same username ( same one I joined AD in the web GUI with) regardless of which account tries to access a share on the client end. I also don't see the UNRAID listed anywhere on my AD domain side which tells me it probably isn't correctly joining the domain. What are some command line things I can run from UNRAID to verify or reestablish the AD connection? Leaving, switching to workgroup and then rejoining AD on the web GUI doesn't seem to be getting it done for me. EDIT #2 Since the AD connection is broken (but UNRAID doesn't seem to know this) I disabled AD and went to workgroup mode. This allowed my shares to be accessible again by setting all the shares to public, BUT it means I lost complete control over everything because it's 100% public and ignoring my previously working AD file security settings. Needless to say this is a sucky Band-Aid solution and I hope someone can chime in with a proper way to correctly reestablish my AD link between UNRAID and my domain. EDIT #3 Seems I was able to view and list the files, but I can't play or copy them without getting a permissions error. This is officially a crap "day off" that was supposed to be spent lazing around catching up on tv shows...