Unable to remove domain user from local group with error "Reason: entry doesn't exist" on ONTAP 9
Applies to
- ONTAP 9
- CIFS/SMB
- Active Directory (AD)
Issue
- A user is deleted and recreated in AD before removing the same user from a local group in ONTAP
- Post that, domain user removal from the local group fails with an "entry doesn't exist" error
Example:
cluster1::> vserver cifs users-and-groups local-group show-members -vserver svm1 -group-name BUILTIN\Administrators
Vserver: svm1
Group Name: BUILTIN\Administrators
Member Name: CIFS\Administrator
Domain1\Domain Admins
Domain1\User
cluster1::> vserver cifs users-and-groups local-group remove-members -vserver svm1 -group-name BUILTIN\Administrators -member-names Domain1\User
Error: command failed: Cannot remove "Domain1\User" from group "BUILTIN\Administrators".Reason: entry doesn't exist.