AD group memberships won't update

[Paul Suh]

I have FreeNAS 11-stable running and bound to Windows Server 2016 successfully. Users and groups from AD show up in FreeNAS, and users can authenticate, but changes to group memberships in AD don't show up on the FreeNAS system. Can anyone tell me where I need to look in the log files to see what is going on?

Here's a screen shot of the AD group membership (I just added Carla Morrison to the group):

And here is output of /usr/bin/id from the FreeNAS system:

Code:

[ladmin@storage1 ~]$ id cmorrison@lcis.bs
uid=22405(LCIS\cmorrison) gid=20513(LCIS\domain users) groups=20513(LCIS\domain users),22405(LCIS\cmorrison),90000002(BUILTIN\users)

Any idea why the user does not show up as a group member from the FreeNAS side?

--Paul

 

[dlavigne]

Did this get resolved?

 

[Paul Suh]

Sort of...

After an extended interval (over a day), the user is now appearing in the group. There must be a cache expiration going on or something. FWIW, clicking on the "Rebuild Directory Service Cache" button doesn't help, and I have tried it with and without the "Disable Active Directory user/group cache" option checked.