Problem: Container refuses to recognize user account but adinfo output returns normal. However, the Docker host delivers both sets of information correctly.
Container: hostname:/ # adquery user -A steve Error: No such user steve
hostname:/ # adinfo Local host name: hostname Joined to domain: lab.mydomain.com Joined as: hostname.lab.mydomain.com Pre-win2K name: hostname Current DC: DC01.lab.mydomain.com Preferred site: mysite01 Zone: lab.mydomain.com/Centrify/Zones/Global Last password set: 2018-01-01 01:23:45 PST CentrifyDC mode: connected Licensed Features: Enabled
DockerHost: mydocker:/ # adquery user -A steve unixname:steve uid:12345 gid:90000 gecos:Steve home:/home/steve ...
Resolution: In this instance the container is running Centrify 5.1.3 (2014) and the Docker host is running Centrify 5.4.1 (2017). Centrify needs to either have matched versions or have the Docker host running an earlier version than the container in order to perform correctly. As the container does not join to the domain, it uses the host's settings to connect and gather information. With the agent versions out of sync, they are unable to propagate the information and adquery returns with an error message - no such user.