Enumerating Unix users and groups from Windows
scott.lovenberg at gmail.com
Wed Jul 23 10:56:35 GMT 2008
Corinna Vinschen wrote:
> when I want to know the user/group name <-> SID mapping of the UNIX user
> and groups (The ones with SIDs S-1-22-1, S-1-22-2), I can call
> LookupAccountSid and LookupAccountName just fine from Windows.
> However, it doesn't seem to be possible to enumerate these accounts
> using NetUserEnum/NetGroupEnum/NetLocalGroupEnum.
> Nor can I ask for detailed user information with NetUserGetInfo. The
> call always returns Win32 error 2221.
> Am I missing something obvious, or is it really only possible to use the
> LookupAccountFOO calls for a direct account<->SID mapping?
Not sure if this has anything to do with it (my samba book is on my desk
at work :/ ), but do you have "winbind enum users = true" and "winbind
enum groups = true" set on the samba server? I'm thinking that those
are only for idmap'ing and bulk lookups, but have you looked at those
settings? Just a stab in the dark.
More information about the samba-technical