+--------------------------------------------------------------------------------+
+                    Active Directory Monitoring @1535561280                     +
+--------------------------------------------------------------------------------+
Active Directory Monitoring is ENABLED
debug finished in 0 seconds for Active Directory Monitoring


+--------------------------------------------------------------------------------+
+                      Active Directory Status @1535561280                       +
+--------------------------------------------------------------------------------+
Active Directory is ENABLED
debug finished in 0 seconds for Active Directory Status


+--------------------------------------------------------------------------------+
+                    Active Directory Run Status @1535561280                     +
+--------------------------------------------------------------------------------+
nmbd is running as pid 20326.
smbd is running as pid 20331.
winbindd is running as pid 20337.
+--------------------------------------------------------------------------------+
+                                   @1535561281                                  +
+--------------------------------------------------------------------------------+
+--------------------------------------------------------------------------------+
+                         SMB Service Status @1535561281                         +
+--------------------------------------------------------------------------------+
SMB will start on boot.
debug finished in 0 seconds for SMB Service Status


+--------------------------------------------------------------------------------+
+                     Active Directory Settings @1535561281                      +
+--------------------------------------------------------------------------------+
Domain:                 GARDIEN.COM
Bind name:              exactadmin
UNIX extensions:        0
Trusted domains:        0
SSL:                    off
Timeout:                60
DNS Timeout:            60
Domain controller:      GARTORVMDC01.gardien.com
Global Catalog Server:  GARTORVMDC01.gardien.com
debug finished in 0 seconds for Active Directory Settings


+--------------------------------------------------------------------------------+
+                           /etc/krb5.conf @1535561281                           +
+--------------------------------------------------------------------------------+
[appdefaults]
            pam = {
                forwardable = true
                ticket_lifetime = 86400
                renew_lifetime = 86400
            }

[libdefaults]
            dns_lookup_realm = true
            dns_lookup_kdc = true
            ticket_lifetime = 24h
            clockskew = 300
            forwardable = yes
            default_realm = GARDIEN.COM

[domain_realm]
            gardien.com = GARDIEN.COM
            .gardien.com = GARDIEN.COM
            GARDIEN.COM = GARDIEN.COM
            .GARDIEN.COM = GARDIEN.COM

[realms]
        GARDIEN.COM = {
            kdc = gartorvmdc01.gardien.com:88
            admin_server = gartorvmdc01.gardien.com:88
            kpasswd_server = gartorvmdc01.gardien.com:464
            default_domain = GARDIEN.COM
        }

[logging]
            default = SYSLOG:INFO:LOCAL7

debug finished in 0 seconds for /etc/krb5.conf


+--------------------------------------------------------------------------------+
+                         /etc/nsswitch.conf @1535561281                         +
+--------------------------------------------------------------------------------+


group: files winbind
hosts: files mdns dns
networks: files
passwd: files winbind
shells: files
services: files
protocols: files
rpc: files
sudoers: files
debug finished in 0 seconds for /etc/nsswitch.conf


+--------------------------------------------------------------------------------+
+                      /usr/local/etc/smb4.conf @1535561281                      +
+--------------------------------------------------------------------------------+
[global]
    username map = /usr/local/etc/smbusers
    server min protocol = SMB2
    server max protocol = SMB3
    encrypt passwords = yes
    dns proxy = no
    strict locking = no
    oplocks = yes
    deadtime = 15
    max log size = 51200
    max open files = 57809
    logging = file
    load printers = no
    printing = bsd
    printcap name = /dev/null
    disable spoolss = yes
    getwd cache = yes
    guest account = floor
    map to guest = Bad User
    obey pam restrictions = no
    ntlm auth = no
    directory name cache size = 0
    kernel change notify = no
    panic action = /usr/local/libexec/samba/samba-backtrace
    nsupdate command = /usr/local/bin/samba-nsupdate -g
    server string = FreeNAS Server
    ea support = yes
    store dos attributes = yes
    lm announce = yes
    unix extensions = no
    null passwords = yes
    acl allow execute always = false
    dos filemode = yes
    multicast dns register = no
    domain logons = no
    idmap config *: backend = tdb
    idmap config *: range = 90000001-100000000
    server role = member server
    workgroup = GARDIEN
    realm = GARDIEN.COM
    security = ADS
    client use spnego = yes
    local master = no
    domain master = no
    preferred master = no
    ads dns update = no
    winbind cache time = 7200
    winbind offline logon = yes
    winbind enum users = yes
    winbind enum groups = yes
    winbind nested groups = yes
    winbind use default domain = no
    winbind refresh tickets = yes
    idmap config GARDIEN: backend = rid
    idmap config GARDIEN: range = 20000-90000000
    allow trusted domains = no
    client ldap sasl wrapping = plain
    template shell = /bin/sh
    template homedir = /home/%D/%U
    netbios name = TORPHNAS01
    create mask = 0666
    directory mask = 0777
    client ntlmv2 auth = yes
    dos charset = CP437
    unix charset = UTF-8
    log level = 1
    ntlm auth = yes
    client lanman auth = yes
    client plaintext auth = yes
    lanman auth = Yes
    server min protocol = CORE
    

[Backups]
    path = "/mnt/StoreVol/Backup"
    printable = no
    veto files = /.snapshot/.windows/.mac/.zfs/
    writeable = yes
    browseable = yes
    access based share enum = no
    vfs objects = zfs_space zfsacl streams_xattr
    hide dot files = yes
    guest ok = no
    nfs4:mode = special
    nfs4:acedup = merge
    nfs4:chown = true
    zfsacl:acesort = dontcare
    

[FLOOR]
    path = "/mnt/StoreVol/FLOOR"
    printable = no
    veto files = /.snapshot/.windows/.mac/.zfs/
    writeable = yes
    browseable = yes
    access based share enum = no
    vfs objects = zfs_space zfsacl streams_xattr
    hide dot files = yes
    guest ok = yes
    nfs4:mode = special
    nfs4:acedup = merge
    nfs4:chown = true
    zfsacl:acesort = dontcare
debug finished in 0 seconds for /usr/local/etc/smb4.conf


+--------------------------------------------------------------------------------+
+                     Kerberos Tickets - 'klist' @1535561281                     +
+--------------------------------------------------------------------------------+
Credentials cache: FILE:/tmp/krb5cc_0
        Principal: exactadmin@GARDIEN.COM

  Issued                Expires               Principal
Aug 29 10:31:38 2018  Aug 29 20:31:38 2018  krbtgt/GARDIEN.COM@GARDIEN.COM
debug finished in 0 seconds for Kerberos Tickets - 'klist'


+--------------------------------------------------------------------------------+
+                   /usr/local/etc/sssd/sssd.conf @1535561281                    +
+--------------------------------------------------------------------------------+
[sssd]
config_file_version = 2
full_name_format = %2$s\%1$s
re_expression = (((?P<domain>[^\\]+)\\(?P<name>.+$))|((?P<name>[^@]+)@(?P<domain>.+$))|(^(?P<name>[^@\\]+)$))
services = nss,pam

[nss]

[pam]

debug finished in 0 seconds for /usr/local/etc/sssd/sssd.conf


+--------------------------------------------------------------------------------+
+            /etc/directoryservice/ActiveDirectory/config @1535561281            +
+--------------------------------------------------------------------------------+
ad_machine=TORPHNAS01$
ad_bindname=exactadmin
ad_domainname=GARDIEN.COM
ad_basedn=DC=gardien,DC=com
ad_binddn=exactadmin@GARDIEN.COM
ad_userdn=
ad_groupdn=
ad_site=CA-TOR-SITE
ad_dcname=GARTORVMDC01.gardien.com
ad_dchost=GARTORVMDC01.gardien.com
ad_dcport=389
ad_gcname=GARTORVMDC01.gardien.com
ad_gchost=GARTORVMDC01.gardien.com
ad_gcport=3268
ad_krbname=gartorvmdc01.gardien.com:88
ad_krbhost=gartorvmdc01.gardien.com
ad_krbport=88
ad_kpwdname=gartorvmdc01.gardien.com:464
ad_kpwdhost=gartorvmdc01.gardien.com
ad_kpwdport=464
ad_krb_realm=GARDIEN.COM
ad_keytab_principal=
ad_keytab_file=
ad_timeout=60
ad_dns_timeout=60
ad_certfile=
ad_ssl=off
ad_verbose_logging=0
ad_unix_extensions=0
debug finished in 0 seconds for /etc/directoryservice/ActiveDirectory/config


+--------------------------------------------------------------------------------+
+           Active Directory Domain Info - 'net ads info' @1535561281            +
+--------------------------------------------------------------------------------+
Environment LOGNAME is not defined. Trying anonymous access.
LDAP server: 192.168.0.90
LDAP server name: GARTORVMDC01.gardien.com
Realm: GARDIEN.COM
Bind Path: dc=GARDIEN,dc=COM
LDAP port: 389
Server time: Wed, 29 Aug 2018 12:48:46 EDT
KDC server: 192.168.0.90
Server time offset: 44
Last machine account password change: Tue, 28 Aug 2018 12:03:41 EDT
debug finished in 1 seconds for Active Directory Domain Info - 'net ads info'


+--------------------------------------------------------------------------------+
+            Active Directory Trust Secret - 'wbinfo -t' @1535561282             +
+--------------------------------------------------------------------------------+
checking the trust secret for domain GARDIEN via RPC calls succeeded
debug finished in 1 seconds for Active Directory Trust Secret - 'wbinfo -t'


+--------------------------------------------------------------------------------+
+         Active Directory NETLOGON connection - 'wbinfo -P' @1535561283         +
+--------------------------------------------------------------------------------+
checking the NETLOGON for domain[GARDIEN] dc connection to "GARTORVMDC01.gardien.com" succeeded
debug finished in 0 seconds for Active Directory NETLOGON connection - 'wbinfo -P'


+--------------------------------------------------------------------------------+
+           Active Directory trusted domains - 'wbinfo -m' @1535561283           +
+--------------------------------------------------------------------------------+
BUILTIN
TORPHNAS01
GARDIEN
debug finished in 0 seconds for Active Directory trusted domains - 'wbinfo -m'


+--------------------------------------------------------------------------------+
+       Active Directory all domains - 'wbinfo --all-domains' @1535561283        +
+--------------------------------------------------------------------------------+
BUILTIN
TORPHNAS01
GARDIEN
debug finished in 0 seconds for Active Directory all domains - 'wbinfo --all-domains'


+--------------------------------------------------------------------------------+
+        Active Directory own domain - 'wbinfo --own-domain' @1535561283         +
+--------------------------------------------------------------------------------+
GARDIEN
debug finished in 1 seconds for Active Directory own domain - 'wbinfo --own-domain'


+--------------------------------------------------------------------------------+
+     Active Directory online status - 'wbinfo --online-status' @1535561284      +
+--------------------------------------------------------------------------------+
BUILTIN : online
TORPHNAS01 : online
GARDIEN : online
debug finished in 0 seconds for Active Directory online status - 'wbinfo --online-status'


+--------------------------------------------------------------------------------+
+   Active Directory domain info - 'wbinfo --domain-info=GARDIEN' @1535561284    +
+--------------------------------------------------------------------------------+
Name              : GARDIEN
Alt_Name          : gardien.com
SID               : S-1-5-21-2248450432-1197600211-1643770023
Active Directory  : Yes
Native            : Yes
Primary           : Yes
debug finished in 0 seconds for Active Directory domain info - 'wbinfo --domain-info=GARDIEN'


+--------------------------------------------------------------------------------+
+     Active Directory DC name - 'wbinfo --dsgetdcname=GARDIEN' @1535561284      +
+--------------------------------------------------------------------------------+
GARTORVMDC01.gardien.com
\\192.168.0.90
1
e7b97eac-6dc6-4416-b348-00664fd41dbe
gardien.com
gardien.com
0xe00031fc
CA-TOR-SITE
CA-TOR-SITE
debug finished in 1 seconds for Active Directory DC name - 'wbinfo --dsgetdcname=GARDIEN'


+--------------------------------------------------------------------------------+
+       Active Directory DC info - 'wbinfo --dc-info=GARDIEN' @1535561285        +
+--------------------------------------------------------------------------------+
GARTORVMDC01.gardien.com (192.168.0.90)
debug finished in 0 seconds for Active Directory DC info - 'wbinfo --dc-info=GARDIEN'


+--------------------------------------------------------------------------------+
+                Active Directory Users - 'wbinfo -u' @1535561285                +
+--------------------------------------------------------------------------------+
GARDIEN\administrator
GARDIEN\exchg
GARDIEN\admin
GARDIEN\guest
GARDIEN\iusr_garmexfe
GARDIEN\krbtgt
GARDIEN\yuko.bito
GARDIEN\andre.hiller
GARDIEN\srv-spiceworks.globa
GARDIEN\srv-sophos.admin
GARDIEN\srv-zenoss.global
GARDIEN\cn.it
GARDIEN\holger.kern
GARDIEN\markus.richter
GARDIEN\sgexactadmin
GARDIEN\arina.long
GARDIEN\maniatechadmin
GARDIEN\tadao.shimizu
GARDIEN\glm.it
GARDIEN\andre.schaefer
GARDIEN\exmerge
GARDIEN\jp.it
GARDIEN\exadmin
GARDIEN\manfred.ludwig
GARDIEN\enadmin
GARDIEN\exactadmin
GARDIEN\nelson.ng
GARDIEN\nelson.ca
GARDIEN\rick.meraw
GARDIEN\kevin.syvret
GARDIEN\iusr_gardc01
GARDIEN\support_388945a0
GARDIEN\dag.jessel
GARDIEN\linda.strobeck
GARDIEN\gilberto.monge
GARDIEN\howard.carpenter
GARDIEN\yibing.xu
GARDIEN\gregory.pegram
GARDIEN\jason.posey
GARDIEN\mark.morneau
GARDIEN\federico.valle
GARDIEN\niraj.patel
GARDIEN\peter.rosenberger
GARDIEN\andre.nestler
GARDIEN\chris.zimmermann
GARDIEN\roland.valentini
GARDIEN\jim.sabey
GARDIEN\sm_9eded2a7812649c98
GARDIEN\sm_c97675baba4949e68
GARDIEN\sm_dcee73ee5e2a4c408
+--------------------------------------------------------------------------------+
+               Active Directory Groups - 'wbinfo -g' @1535561287                +
+--------------------------------------------------------------------------------+
GARDIEN\domain computers
GARDIEN\exchange domain servers
GARDIEN\domain controllers
GARDIEN\read-only domain controllers
GARDIEN\domain admins
GARDIEN\domain users
GARDIEN\group policy creator owners
GARDIEN\domain guests
GARDIEN\macola_ts
GARDIEN\toronto managers
GARDIEN\smsmse viewers
GARDIEN\macola_es
GARDIEN\smsmse admins
GARDIEN\exmerges
GARDIEN\garsg.all
GARDIEN\kladmins
GARDIEN\kloperators
GARDIEN\garsg.res.technetglobalowners
GARDIEN\$af1000-rq4q5a73alin
GARDIEN\dnsupdateproxy
GARDIEN\sophosdomainuser
GARDIEN\sophosdomainpoweruser
GARDIEN\sophosdomainadministrator
GARDIEN\garsg.res.financeshare
GARDIEN\cert publishers
GARDIEN\allowed rodc password replication group
GARDIEN\ras and ias servers
GARDIEN\denied rodc password replication group
GARDIEN\helpservicesgroup
GARDIEN\telnetclients
GARDIEN\dnsadmins
GARDIEN\sqlserver2005mssqluser$garmexfe$bkupexec
GARDIEN\dhcp users
GARDIEN\dhcp administrators
GARDIEN\sqlserver2005mssqluser$dc01$bkupexec
GARDIEN\exchange enterprise servers
GARDIEN\iis_wpg
GARDIEN\garsg.res.commonshare
GARDIEN\garsg.res.itshare
GARDIEN\dpmradcomtrustedmachines$garsgvmdc01
GARDIEN\dpmradmtrustedmachines$garsgvmdc01
GARDIEN\garsg.res.marketing
GARDIEN\garsg.res.testnetmembers
GARDIEN\garsg.res.technetusers
GARDIEN\garsg.res.technetglobalvisitors
GARDIEN\sg.test.groups
GARDIEN\garsin.all
GARDIEN\garsin.administration
GARDIEN\garsin.s_drive
GARDIEN\garsin.m_drive
debug finished in 1 seconds for Active Directory Groups - 'wbinfo -g'


