TrueNas 12.0U1 AD member issues

[0rion447]

Hey all,
Im having an issue going my nap to my AD. I had it joined before but then I migrated the nas to a new host, and now its not populating with AD users or groups. Is there anyway to reset the AD service to default?

 

[anodos]

Hey all,
Im having an issue going my nap to my AD. I had it joined before but then I migrated the nas to a new host, and now its not populating with AD users or groups. Is there anyway to reset the AD service to default?

There's an advanced option in the AD form to "leave" the domain. Input credentials for an admin account for the domain and it should take care of the rest of the cleanup.

 

[0rion447]

There's an advanced option in the AD form to "leave" the domain. Input credentials for an admin account for the domain and it should take care of the rest of the cleanup.

Thanks for the reply, I can't believe I missed that. However, I am now stuck in a faulted state. Running midclt call activedirectory.domain_info | jq
shows information for my alternate AD.

 

[anodos]

Thanks for the reply, I can't believe I missed that. However, I am now stuck in a faulted state. Running midclt call activedirectory.domain_info | jq
shows information for my alternate AD.

Hmm... may be that steps leading up to this left us in a semi-configured state. Run following commands

Code:

midclt call activedirectory.stop
rm /var/db/system/samba4/private/secrets.tdb

Then remove any kerberos keytab or realm info from the GUI, and enter your new domain info. You should also ensure that you have DNS set correctly for the new AD domain (network configuration on TrueNAS).

 

[0rion447]

Thank you so much, after testing endpoints are able to find the NAS without issue.

 

[anodos]

Thank you so much, after testing endpoints are able to find the NAS without issue.

Great. In future if you have to switch back to the other domain, make sure you leave the one we're currently joined to through the GUI, before trying to join the new one. This ensures that we cleanly leave the current domain (removing DNS entries and computer object), and also clean up the local cache files / configuration.