sendnrw/netbird-docs
2
0
Fork 0
mirror of https://github.com/netbirdio/docs.git synced 2026-10-22 13:39:03 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add troubleshooting step for allow-group AD lookup fail

Browse Source
This commit is contained in:
Theodor S. Midtlien
2026-10-21 18:35:43 +02:00
parent a2f7d15bbf
commit 5e8ab2caca
1 changed files with 28 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pages/client/profile-ownership.mdx
+28
View File
@@ -204,6 +204,34 @@ sudo netbird profile claim default --owner <owner>
**Fix:** Read the daemon log. The log shows which of these causes stopped the daemon.
### Service commands fail because a group name does not resolve
**Symptom:** On Windows, `netbird service install` and `netbird service reconfigure` fail with an error like this:
```text
Error: resolve allowed group "netbird": look up account: The trust relationship between this workstation and the primary domain failed.
```
**Cause:** The service saves the `--allow-group` names in `%ProgramData%\Netbird\service.json`. Each `install` and `reconfigure` resolves these names again. If the device cannot connect to the domain controller, the name does not resolve and the command stops.
**Fix:** Do one of these steps in an elevated terminal:
- To keep the restriction, set the group SID. The installer does not look up a SID. The `allow_group_ids` field in `service.json` shows the SID from the last installation.
```shell
netbird service install --allow-group sid:<SID>
```
- To remove the restriction, set an empty value:
```shell
netbird service install --allow-group=""
```
If the service is not installed, use `install`. `reconfigure` works only on an installed service.
**Confirm:** Run `netbird service status`. Then connect to the daemon as a user in the group, for example with `netbird status`.
### Collect information for support
A debug bundle includes `profiles.txt` and `active_profile.json`. These files show each profile, its owner, and the active profile. For instructions, see [Troubleshooting client issues](/help/troubleshooting-client).