Samba ignores group memberships


I had to do a restore of our DC but then the fileserver (a UCS managed node / memberserver) became out of sync. I reset the machine password but Samba still has issues.

First, it didn’t pickup any changes to shares. It turned out to be because of the Notifier ID on the memberserver being far more progressed than on the DC. I had to rebuilt the listener log or whatever.

Now I can make changes to the shares and those are picked up but anything but concrete account names is ignored. It worked before, so I know the share config itself is correct. Unfortunately, we make a lot of use of groups.

Where can I look for further hints on why this isn’t working?