Seit dem Update auf UCS 4.1.2 funktioniert der Abgleich der AD-Daten zwischen UCS und meinem ReadyNAS 516 nicht mehr. Im Log sehe ich folgendes:
[16-05-23 13:32:01] 3031 rndb_account.c:2374 error: ******************ADS Import Starts*********************.
[16-05-23 13:32:01] 3031 rndb_ads_utils.c:152 info: ADS CMD::get domain sid: net getdomainsid
[16-05-23 13:32:01] 3031 rndb_ads_utils.c:574 info: ADS CMD::ldap search open: LANG=C net -P ads search \(objectClass=group\) sAMAccountName objectSid distinguishedName
[16-05-23 13:32:01] 3031 rndb_account.c:1262 info: 44 domain group found
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Pre-Windows 2000 Compatible Access sid=S-1-5-32-554 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Windows Authorization Access Group sid=S-1-5-32-560 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Certificate Service DCOM Access sid=S-1-5-32-574 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Network Configuration Operators sid=S-1-5-32-556 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Terminal Server License Servers sid=S-1-5-32-561 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Incoming Forest Trust Builders sid=S-1-5-32-557 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Performance Monitor Users sid=S-1-5-32-558 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Cryptographic Operators sid=S-1-5-32-569 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Distributed COM Users sid=S-1-5-32-562 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Performance Log Users sid=S-1-5-32-559 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Remote Desktop Users sid=S-1-5-32-555 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Account Operators sid=S-1-5-32-548 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Event Log Readers sid=S-1-5-32-573 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Backup Operators sid=S-1-5-32-551 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Server Operators sid=S-1-5-32-549 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Printer-Admins sid=S-1-5-32-550 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:01] 3031 rndb_account.c:1299 debug: sAMAccountName=Administrators sid=S-1-5-32-544 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:02] 3031 rndb_account.c:1299 debug: sAMAccountName=Replicator sid=S-1-5-32-552 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:02] 3031 rndb_account.c:1299 debug: sAMAccountName=IIS_IUSRS sid=S-1-5-32-568 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:02] 3031 rndb_account.c:1299 debug: sAMAccountName=Guests sid=S-1-5-32-546 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:02] 3031 rndb_account.c:1299 debug: sAMAccountName=Users sid=S-1-5-32-545 is not domain object. domain sid is S-1-5-21-1210389088-1291126767-1298570957
[16-05-23 13:32:02] 3031 rndb_account.c:1398 info: 44/44 groups imported in 394ms.
[16-05-23 13:32:02] 3031 rndb_ads_utils.c:574 info: ADS CMD::ldap search open: LANG=C net -P ads search \(\&\(objectClass=user\)\(\!\(sAMAccountType=805306369\)\)\(\!\(sAMAccountType=805306370\)\)\) sAMAccountName objectSid distinguishedName mail primaryGroupID memberOf cn
[16-05-23 13:32:02] 3031 rndb_account.c:963 info: 10 domain user found
[16-05-23 13:32:02] 3031 rndb_account.c:1204 info: 10/10 users imported in 463ms.
[16-05-23 13:32:02] 3031 rndb_account.c:2262 error: Error. Fail to insert $home_folder/$user/$group/$group_has_user
[16-05-23 13:32:02] 3031 rndb_account.c:2405 error: rndb_ads_account_import() ==> 3 (917ms)
[16-05-23 13:32:02] 3031 rndb_api.c:956 error: rndb_import_nolock() ==> 3 (917ms)
Das Problem scheint in der drittletzten Zeile zu liegen:
[16-05-23 13:32:02] 3031 rndb_account.c:2262 error: Error. Fail to insert $home_folder/$user/$group/$group_has_user
Irgendetwas scheint sich hier zwischen 4.1-1 und 4.1-2 bei der Übergabe der Parameter geändert zu haben, aber leider habe ich keine Idee, wie ich das debuggen könnte oder den Entwicklern des NAS bei NETGEAR einen Hinweis weitergebe, wie sich das Problem abstellen lässt.
Vielleicht weiss ja hier jemand Rat.