Enumerating Unix users and groups from Windows

[Scott Lovenberg]

Corinna Vinschen wrote:
> Hi,
>
> when I want to know the user/group name <-> SID mapping of the UNIX user
> and groups (The ones with SIDs S-1-22-1, S-1-22-2), I can call
> LookupAccountSid and LookupAccountName just fine from Windows. 
>
> However, it doesn't seem to be possible to enumerate these accounts
> using NetUserEnum/NetGroupEnum/NetLocalGroupEnum.
>
> Nor can I ask for detailed user information with NetUserGetInfo.  The
> call always returns Win32 error 2221.
>
> Am I missing something obvious, or is it really only possible to use the
> LookupAccountFOO calls for a direct account<->SID mapping?
>
>
> Corinna
>   
Not sure if this has anything to do with it (my samba book is on my desk 
at work :/ ), but do you have "winbind enum users = true" and "winbind 
enum groups = true" set on the samba server?  I'm thinking that those 
are only for idmap'ing and bulk lookups, but have you looked at those 
settings?  Just a stab in the dark.