Spaces in groupname and winbind

[Matt Pavlovich]

On Mon, 2002-03-18 at 15:15, MCCALL,DON (HP-USA,ex1) wrote:
> Hi Matt,
> Do you have a LARGE user and/or group base in the NT domain you are querying
> against?  

4000+ Users and 120+ Groups.  Is that "LARGE"? Some groups could have
all users in it.  

> Does getent group ALWAYS return the same subset of groups, or does the
> output differ each time you do it?

Same groups every time.. upon closer inspection, I need to revise my
earlier number of 5 groups to 10 groups that are returned.. and it is
the FIRST 10 groups.

> Is there anything outstandingly different between the groups that show up
> with getent group and the ones that don't (but do with wbinfo -g)?

All the groups show up w/ wbinfo -g, only the first 10 show up w/ getent
group.

Matt Pavlovich

> -----Original Message-----
> From: Matt Pavlovich [mailto:mpav at algx.net]
> Sent: Monday, March 18, 2002 11:03 AM
> To: MCCALL,DON (HP-USA,ex1)
> Cc: samba-technical at lists.samba.org
> Subject: RE: Spaces in groupname and winbind
> 
> 
> Don-
> 
> Thanks for the clarification.  That seems to work.  My only problem now
> is that only a few groups are being returned w/ 'getent group'.  I can
> get a full list of groups by doing a wbinfo -g, but not through the name
> service.  Anything that does a group ID -> group Name mapping, like
> "ls", etc, are severely slowed down, and remote authentication isn't
> working in some cases.  Presumably due to the inability to map 'valid
> users = @GROUPNAME' b/c the groupname isn't coming through getgrp().
> 
> Anyone else see this on Solaris 8?
> 
> Matt Pavlovich
> 
> On Fri, 2002-03-15 at 14:52, MCCALL,DON (HP-USA,ex1) wrote:
> > Sorry Matt (inherent danger of cutting and pasting from someone elses
> > message - Lin Li, in this case, who was using the domain separator "\"),
> > use the domain separator you have defined in your smb.conf
> > file.
> > Don
> > 
> > -----Original Message-----
> > From: Matt Pavlovich [mailto:mpav at algx.net]
> > Sent: Friday, March 15, 2002 3:30 PM
> > To: MCCALL,DON (HP-USA,ex1)
> > Cc: samba-technical at lists.samba.org
> > Subject: RE: Spaces in groupname and winbind
> > 
> > 
> > Don-
> > 
> > Would I use "\" or the domain separator, in my case "+"?  I see winbind
> > does a translation at one point.. but I do not know the order of
> > operation.
> > 
> > Matt Pavlovich
> > 
> > On Fri, 2002-03-15 at 14:26, MCCALL,DON (HP-USA,ex1) wrote:
> > > Hi Matt,
> > > I haven't tried this myself, but someone else on the list swears that
> this
> > > will work:
> > > quote:
> > > 
> > > I just find use valid users = ' @"DOMAIN\Domain Users" ' will work.
> > > endquote.
> > > 
> > > Hope this helps,
> > > Don
> > > 
> > > -----Original Message-----
> > > From: Matt Pavlovich [mailto:mpav at algx.net]
> > > Sent: Friday, March 15, 2002 3:09 PM
> > > To: samba-technical at lists.samba.org
> > > Subject: Spaces in groupname and winbind
> > > 
> > > 
> > > When trying to limit access to a share with the parameter:
> > > valid users= @DOMAIN+group name, winbind has problems parsing that name.
> > > 
> > > Is the group is "Ras Users" --
> > > 
> > > log.winbind 
> > > [2002/03/15 14:04:50, 5] rpc_parse/parse_prs.c:dbg_rw_punival(730)
> > >           0030 buffer     :  . at .D.O.M.A.I.N.\.R.a.s.
> > > 
> > > I also tried the suggested fix of:
> > > 
> > > valid users= " "@DOMAIN+Group name" "
> > > 
> > > What would be the valid syntax to escape the space with winbind?
> > > 
> > > Matt Pavlovich
> > 
>