CONTAP-824925: Repair stale CIFS local-group memberships
Issue
CIFS local-group memberships can become inaccessible when their associated domain identifier is no longer present in the SVM’s domain map. In this situation,
A targeted repair operation can identify and remove memberships tied to missing domain identifiers without deleting the local users and groups database. By default, the operation checks and reports stale entries without changing them; removal requires explicitly disabling check-only mode and confirming the action.
show-members may return no members even though stale membership records remain, and access that depends on those memberships may fail. Adding a member again may create a new domain identifier without removing the stale records.A targeted repair operation can identify and remove memberships tied to missing domain identifiers without deleting the local users and groups database. By default, the operation checks and reports stale entries without changing them; removal requires explicitly disabling check-only mode and confirming the action.
