Active Directory no users in GUI

[spaxxilein]

After installing a new server and using Replication Task to send data from our old server to our new Truenas 12.0-U2 server i tried to connect the new server (same network as old server, both together in the same NET as Windows AD server) to Active Directory.

We only have a small active directory with max. 100 entities.

The joining process seems to work fine according to the GUI and middleware log

Code:

[2021/02/23 21:06:35] (WARNING) ActiveDirectoryService.conn_check():825 - Less than two Domain Controllers are in our Active Directory Site. This may result in production outage if the currently connected DC is                           unreachable.
[2021/02/23 21:06:35] (DEBUG) EtcService.generate():378 - No new changes for /etc/security/pam_winbind.conf
[2021/02/23 21:06:35] (DEBUG) ActiveDirectoryService.start():664 - Test join to DOMAINNAME failed. Performing domain join.
[2021/02/23 21:06:37] (DEBUG) ActiveDirectoryService.start():684 - Successfully generated keytab for computer account. Clearing bind credentials
[2021/02/23 21:06:37] (DEBUG) EtcService.generate():378 - No new changes for /etc/krb5.conf
[2021/02/23 21:06:37] (WARNING) middlewared.plugins.service_.services.base_freebsd.freebsd_service():134 - nmbd forcestop failed with code 1: 'nmbd not running? (check /var/run/samba4/nmbd.pid).\n'
[2021/02/23 21:06:38] (DEBUG) EtcService.generate():378 - No new changes for /etc/local/avahi/avahi-daemon.conf
[2021/02/23 21:06:39] (DEBUG) EtcService.generate():378 - No new changes for /etc/local/smb4.conf
[2021/02/23 21:06:39] (DEBUG) EtcService.generate():378 - No new changes for /etc/security/pam_winbind.conf
[2021/02/23 21:06:40] (DEBUG) EtcService.generate():378 - No new changes for /etc/local/smb4.conf
[2021/02/23 21:06:40] (DEBUG) EtcService.generate():378 - No new changes for /etc/security/pam_winbind.conf
[2021/02/23 21:06:40] (DEBUG) EtcService.generate():378 - No new changes for /etc/local/smb4_share.conf
[2021/02/23 21:06:40] (DEBUG) EtcService.generate():378 - No new changes for /etc/local/avahi/avahi-daemon.conf
[2021/02/23 21:06:41] (DEBUG) SMBService.add_admin_group():86 - No cache entry indicating delayed action to add admin_group was found.
[2021/02/23 21:06:41] (DEBUG) EtcService.generate():378 - No new changes for /etc/local/smb4.conf
[2021/02/23 21:06:41] (DEBUG) EtcService.generate():378 - No new changes for /etc/security/pam_winbind.conf
[2021/02/23 21:06:41] (DEBUG) EtcService.generate():378 - No new changes for /etc/local/smb4_share.conf
[2021/02/23 21:06:42] (WARNING) middlewared.plugins.service_.services.base_freebsd.freebsd_service():134 - nmbd forcestop failed with code 1: 'nmbd not running? (check /var/run/samba4/nmbd.pid).\n'
[2021/02/23 21:06:43] (DEBUG) EtcService.generate():378 - No new changes for /etc/local/avahi/avahi-daemon.conf
[2021/02/23 21:06:44] (DEBUG) EtcService.generate():378 - No new changes for /etc/local/avahi/avahi-daemon.conf
[2021/02/23 21:06:45] (DEBUG) SMBService.add_admin_group():86 - No cache entry indicating delayed action to add admin_group was found.
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/pam.inc
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/kde
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/telnetd
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/xdm
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/sudo
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/imap
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/system
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/rsh
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/passwd
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/pam.skel_freebsd
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/README
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/pop3
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/other
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/cron
[2021/02/23 21:06:45] (DEBUG) EtcService.generate():378 - No new changes for /etc/pam.d/atrun
[2021/02/23 21:06:46] (DEBUG) EtcService.generate():378 - No new changes for /etc/local/nslcd.conf
[2021/02/23 21:06:46] (DEBUG) ActiveDirectoryService.get_cache():1442 - cache fill is in progress.

I can find the users and groups on CLI with wbinfo -u / wbinfo -g just fine.

The problem is that when i open the permissions of the replicated dataset, that there is still no username inside. It is the secureity ID which is not filled.

User:

Code:

100001104 Could not find a user name for this user ID. 

Also i cannot see the users / groups from the domain in the GUI. I compared ALL settings in Active Directory and smb4.conf with the old server and they are 100% identical but users do not show in GUI.

When i enter the Permissions tab on the share and start typing in the "User" or "Group" field, i can see in the middlewared log that there is always the message : "

Code:

(DEBUG) ActiveDirectoryService.get_cache():1442 - cache fill is in progress.

Altough according to the task manager in GUI the task has already finished. Ofcourse i also tried the "Rebuild Directory Service Cache" button which just gives me:

Code:

DSCache.backup():155 - No cache exists for directory service [activedirectory].

in the middleware logfile.


I tried for hours further diagnosing this, but i am clueless.

Anybody has an idea?

Best Regards,

spaxxilein

 

[Blueraiz]

Me too having same issue except mine is new installation. Version TrueNAS-12.0-U2.1. Users and groups are showing in wbinfo command but not in Gui... help please