winbindd & nscd on Solaris 2.7

[Matthew McCowan]

Howdy all,

running samba 2.2.5 on a solaris 2.7 with winbindd pointing to an NT4 PDC.

Occasionally winbindd will hand out the wrong uid to a user trying to attach
to the solaris box thru any PAM enabled service (telnet, smbd, ssh, etc).
For example Alice will login to a shell using her normal credentials and
winbindd will give her Bob's uid, even though "getent passwd" clearly shows
Bob(uid)!=Alice(uid).

The quick (not the track down bug and bludgeon it to death!) fix is to kill
winbindd, stop the nscd (name service cache daemon) remove the
winbindd_cache.tdb and restart winbindd (and optionally restart nscd).

I must say that the functionality provided by winbindd is nothing short of
fantastic. Open source single sign-on may finally be moving out of the realm
of myth and legend. Super effort!

Guess I see if 2.2.6 has a fix ...

Respec'!

Matt McC