winbind and NSS

Steve Langasek vorlon at
Tue Nov 26 22:00:11 GMT 2002

On Tue, Nov 26, 2002 at 01:43:44PM -0800, Arup Biswas wrote:
> I am interested in using winbind for mapping users and
> groups across unix and windows domains.
> To achieve this samba documentation specifies the
> following entries in the nsswitch.conf
> passwd: files(nis)	winbind
> groups:  files(nis)	winbind

> My understanding of the smbd code is that getpwnam()
> is the only nss call that is really used in the
> context of mapping users/groups. My question is what
> is the basic minimal set of nss calls that I need to
> support in order to achieve user/group mapping. 

> Here is why I am considering supporting only the
> minimal set of nss calls: we are using a platform
> where nss is not supported and the less number of
> calls we need to "nss-enable" the less work for us. We
> can keep the other password/group access calls
> nss-disabled.

getpwent (optional)
getgrent (optional)

Those are the main calls.  Depending on how the system is implemented,
you may need to consider other NSS calls for the backend to the
initgroups() function, but otherwise, that pretty much covers everything
you'd need to do with NSS for users and groups.

Steve Langasek
postmodern programmer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :

More information about the samba-technical mailing list