Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Active Directory Middleware User / Group cache not initialized properly on boot.

Description

Latest Scale attached to 2016 AD

wbinfo -u shows expected results

SENDARIAN\guest
SENDARIAN\administrator
SENDARIAN\krbtgt
SENDARIAN\chaos
SENDARIAN\serviceacct
SENDARIAN\test
SENDARIAN\defaultaccount
SENDARIAN\richard.darnell

wbinfo -g shows expected results

SENDARIAN\domain computers
SENDARIAN\cert publishers
SENDARIAN\domain users
SENDARIAN\domain guests
SENDARIAN\ras and ias servers
SENDARIAN\domain admins
SENDARIAN\schema admins
SENDARIAN\enterprise admins
SENDARIAN\group policy creator owners
SENDARIAN\allowed rodc password replication group
SENDARIAN\denied rodc password replication group
SENDARIAN\enterprise read-only domain controllers
SENDARIAN\cloneable domain controllers
SENDARIAN\protected users
SENDARIAN\read-only domain controllers
SENDARIAN\domain controllers
SENDARIAN\winrmremotewmiusers__
SENDARIAN\dnsadmins
SENDARIAN\dnsupdateproxy
SENDARIAN\dhcp users
SENDARIAN\dhcp administrators
SENDARIAN\access-denied assistance users
SENDARIAN\key admins
SENDARIAN\enterprise key admins
SENDARIAN\esx admins

wbinfo -m shows expected results

BUILTIN
SCALENAS
SENDARIAN
wbinfo -t show successful

-----------------------------

If I go into Edit ACL on a dataset, add a group item and then search the group dropdown I only get entries from the AD Users (as well as the Scale defaults). I get exactly the same when I select User and the use the user dropdown

Problem/Justification

None

Impact

None

Attachments

1

Activity

Show:

Andrew Walker 
September 14, 2022 at 4:07 PM

found that changes to AD are not propagated properly

This cache is just consumed by the webui. It’s a convenience feature, not security critical. It gets refreshed automatically daily, and will also add any users discovered by manually typing in names. We don’t refresh more frequently to reduce load on remote DC.

Sean Nugent 
September 14, 2022 at 4:01 PM

You should have a debug as requested

Bug Clerk 
September 14, 2022 at 4:01 PM

Sean Nugent 
September 14, 2022 at 4:01 PM

I can do.

I have a cron job as a just in case. It may be unnessesary - but I don’t want to fiond that changes to AD are not propagated properly so I decided to play safe and run a cron job every four hours to ensure that the drop downs are correct.

Andrew Walker 
September 14, 2022 at 2:30 PM
(edited)

Can you attach a debug from 22.02.3? Why do you have a cronjob for this?

Complete

Details

Assignee

Reporter

Labels

Impact

Components

Fix versions

Affects versions

Priority

More fields

Katalon Platform

Created April 18, 2022 at 9:41 AM
Updated September 14, 2022 at 4:11 PM
Resolved September 14, 2022 at 4:11 PM