[Samba] 'getent passwd' shows duplicate user accounts

[David Collins]

Hello,

I am setting up an LDAP Samba server, and have migrated all the local
posix account info into it as well as creating the smb account info.

I have now set up this server to use LDAP for authentication (rather
than /etc/passwd, etc.) like so ...
sudo apt-get --yes install ldap-auth-client
sudo auth-client-config -a -p lac_ldap

When testing the result with 'getent passwd', I see all the LDAP user
accounts, but it seems the info in /etc/passwd file is also reported.

Is this normal?

The following shows the output from getent (note that 'bin' and 'daemon'
for example are repeated) and further down is the list of user accounts
in LDAP.

$ getent passwd
root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13:proxy:/bin:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
list:x:38:38:Mailing List Manager:/var/list:/bin/sh
irc:x:39:39:ircd:/var/run/ircd:/bin/sh
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
libuuid:x:100:101::/var/lib/libuuid:/bin/sh
dhcp:x:101:102::/nonexistent:/bin/false
syslog:x:102:103::/home/syslog:/bin/false
klog:x:103:104::/home/klog:/bin/false
hplip:x:104:7:HPLIP system user,,,:/var/run/hplip:/bin/false
avahi-autoipd:x:105:113:Avahi autoip
daemon,,,:/var/lib/avahi-autoipd:/bin/false
gdm:x:106:114:Gnome Display Manager:/var/lib/gdm:/bin/false
messagebus:x:107:116::/var/run/dbus:/bin/false
avahi:x:108:117:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/bin/false
polkituser:x:109:119:PolicyKit,,,:/var/run/PolicyKit:/bin/false
haldaemon:x:110:120:Hardware abstraction
layer,,,:/var/run/hald:/bin/false
linux:x:1000:1000:linux,,,:/home/linux:/bin/bash
openldap:x:111:122:OpenLDAP Server Account,,,:/var/lib/ldap:/bin/false
root:x:0:0:Netbios Domain Administrator:/home/root:/bin/false
nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
david:x:1003:513:David:/home/david:/bin/bash
frank:x:1004:513:System User:/home/frank:/bin/bash
fred:x:1005:513:System User:/home/fred:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/bin/sh
bin:x:2:2:bin:/bin:/bin/sh
sys:x:3:3:sys:/dev:/bin/sh
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/bin/sh
man:x:6:12:man:/var/cache/man:/bin/sh
lp:x:7:7:lp:/var/spool/lpd:/bin/sh
mail:x:8:8:mail:/var/mail:/bin/sh
news:x:9:9:news:/var/spool/news:/bin/sh
uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
proxy:x:13:13:proxy:/bin:/bin/sh
www-data:x:33:33:www-data:/var/www:/bin/sh
backup:x:34:34:backup:/var/backups:/bin/sh
list:x:38:38:Mailing List Manager:/var/list:/bin/sh
irc:x:39:39:ircd:/var/run/ircd:/bin/sh
gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
libuuid:x:100:101:libuuid:/var/lib/libuuid:/bin/sh
dhcp:x:101:102:dhcp:/nonexistent:/bin/false
syslog:x:102:103:syslog:/home/syslog:/bin/false
klog:x:103:104:klog:/home/klog:/bin/false
hplip:x:104:7:HPLIP system user,,,:/var/run/hplip:/bin/false
avahi-autoipd:x:105:113:Avahi autoip
daemon,,,:/var/lib/avahi-autoipd:/bin/false
gdm:x:106:114:Gnome Display Manager:/var/lib/gdm:/bin/false
messagebus:x:107:116:messagebus:/var/run/dbus:/bin/false
avahi:x:108:117:Avahi mDNS daemon,,,:/var/run/avahi-daemon:/bin/false
polkituser:x:109:119:PolicyKit,,,:/var/run/PolicyKit:/bin/false
haldaemon:x:110:120:Hardware abstraction
layer,,,:/var/run/hald:/bin/false
openldap:x:111:122:OpenLDAP Server Account,,,:/var/lib/ldap:/bin/false

$ ldapsearch -xLLL -b "ou=Users,dc=collins" | grep "dn:"
dn: ou=Users,dc=collins
dn: uid=root,ou=Users,dc=collins
dn: uid=nobody,ou=Users,dc=collins
dn: uid=linux,ou=Users,dc=collins
dn: uid=david,ou=Users,dc=collins
dn: uid=frank,ou=Users,dc=collins
dn: uid=fred,ou=Users,dc=collins
dn: uid=daemon,ou=Users,dc=collins
dn: uid=bin,ou=Users,dc=collins
dn: uid=sys,ou=Users,dc=collins
dn: uid=sync,ou=Users,dc=collins
dn: uid=games,ou=Users,dc=collins
dn: uid=man,ou=Users,dc=collins
dn: uid=lp,ou=Users,dc=collins
dn: uid=mail,ou=Users,dc=collins
dn: uid=news,ou=Users,dc=collins
dn: uid=uucp,ou=Users,dc=collins
dn: uid=proxy,ou=Users,dc=collins
dn: uid=www-data,ou=Users,dc=collins
dn: uid=backup,ou=Users,dc=collins
dn: uid=list,ou=Users,dc=collins
dn: uid=irc,ou=Users,dc=collins
dn: uid=gnats,ou=Users,dc=collins
dn: uid=libuuid,ou=Users,dc=collins
dn: uid=dhcp,ou=Users,dc=collins
dn: uid=syslog,ou=Users,dc=collins
dn: uid=klog,ou=Users,dc=collins
dn: uid=hplip,ou=Users,dc=collins
dn: uid=avahi-autoipd,ou=Users,dc=collins
dn: uid=gdm,ou=Users,dc=collins
dn: uid=messagebus,ou=Users,dc=collins
dn: uid=avahi,ou=Users,dc=collins
dn: uid=polkituser,ou=Users,dc=collins
dn: uid=haldaemon,ou=Users,dc=collins
dn: uid=openldap,ou=Users,dc=collins

Regards,
David Collins