[Samba-it] wbinfo --group-info

[Piviul]

Piviul ha scritto il 25/08/2016 alle 15:42:
> Ciao a tutti, ho un problema in samba dalla versione 4.2: wbinfo
> --group-info <domain group> non mostra più l'elenco degli utenti del
> gruppo <domain group>. Ho aperto un bug report[...]
Non è un baco:

winbind expand groups (G)

            This option controls the maximum depth that winbindd will 
traverse when flattening nested group memberships of Windows domain 
groups. This is
            different from the winbind nested groups option which 
implements the Windows NT4 model of local group nesting. The "winbind 
expand groups"
            parameter specifically applies to the membership of domain 
groups.

            Be aware that a high value for this parameter can result in 
system slowdown as the main parent winbindd daemon must perform the 
group unrolling
            and will be unable to answer incoming NSS or authentication 
requests during this time.

            The default value was changed from 1 to 0 with Samba 4.2. 
Some broken applications calculate the group memberships of users by 
traversing groups,
            such applications will require "winbind expand groups = 1". 
But the new default makes winbindd more reliable as it doesn't require 
SAMR access to
            domain controllers of trusted domains.

            Default: winbind expand groups = 0

Almeno questa è risolta.

Piviul