[Samba] Problem with winbind (is this the right list?)

[George Lenzer]

First, I want to thank folks for replying. :)  When I did an strace the
first time it pointed out that I created the symlink with the wrong
name.  After deleting and recreating the symlink, I got this:

List of local users first...

read(3, "", 4096)                       = 0
open("/etc/ld.so.cache", O_RDONLY)      = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=62728, ...}) = 0
old_mmap(NULL, 62728, PROT_READ, MAP_PRIVATE, 4, 0) = 0x401ed000
close(4)                                = 0
open("/lib/libnss_winbind.so.2", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\17"...,
1024) = 1024
fstat64(4, {st_mode=S_IFREG|0755, st_size=16033, ...}) = 0
old_mmap(NULL, 23536, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) =
0x40015000
mprotect(0x40018000, 11248, PROT_NONE)  = 0
old_mmap(0x40018000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,
4, 0x2000) = 0x40018000
old_mmap(0x40019000, 7152, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40019000
close(4)                                = 0
munmap(0x401ed000, 62728)               = 0
getpid()                                = 2675
getpid()                                = 2675
getpid()                                = 2675
lstat64("/tmp/.winbindd", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
lstat64("/tmp/.winbindd/pipe", 0xbffff430) = -1 ENOENT (No such file or
directory)
close(3)                                = 0
munmap(0x40013000, 4096)                = 0
getpid()                                = 2675
getpid()                                = 2675
lstat64("/tmp/.winbindd", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
lstat64("/tmp/.winbindd/pipe", 0xbffff4d0) = -1 ENOENT (No such file or
directory)
munmap(0x40014000, 4096)                = 0
_exit(0)                                = ?

It looks like the libnss_winbind.so lib is complaining about a file not
existing.  I checked and found that there is a /tmp/.winbindd  but it
doesn't contain a file in it called 'pipe'

Daniel said:
> Argh.  Of course it would be the simplest answer, winbind enum user
and
> winbind enum group were set to No after reading "On large
installations
> it may be necessary to suppress the enumeration of users...", and
> forgotten about.

Hmmm...  Are you saying it should be set to Yes, or to No?

Here is my smb.conf:

[global]

# WinBind stuff
   winbind separator = +
   winbind uid = 10000-20000
   winbind gid = 10000-20000
   winbind enum users = yes
   winbind enum groups = yes
   template homedir = /home/winnt/%D/%U
   template shell = /bin/bash

# Set the Windows name of your workstation
   netbios name = 0000s035

# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = CPLIBRARY

# server string is the equivalent of the NT Description field
   server string = RedHat 8.0 Workstation

# Printer settings
   printcap name = /etc/printcap
   load printers = yes
   printing = lprng

# this tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/%m.log

# Put a capping on the size of the log files (in Kb).
   max log size = 100

# Logging level
   log level = 1

# Security mode. Most people will want user level security.
   security = domain

# Use password server option only with security = server
   password server = *

# Use encryption
   encrypt passwords = yes

# Where is the smbpasswd file?
   smb passwd file = /etc/samba/smbpasswd

#      UNIX pw  to be kept in sync with the SMB password.
   unix password sync = Yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*

#  PAM pw
   pam password change = yes

# Samba should obey PAM's account and session management directives.
  obey pam restrictions = yes

# Most people will find that this option gives better performance.
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

# Browser Control Options:
   local master = no

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
   wins server = 10.0.1.15

# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
via DNS nslookups.    dns proxy = no 

# Case Preservation can be handy - system default is _no_
  preserve case = yes
  short preserve case = yes
  default case = lower
  case sensitive = no

# Share Definitions ==============================
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   valid users = %D+%S
   create mode = 0664
   directory mode = 0775

[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
   guest ok = no
   writable = no
   printable = yes

[testshare$]
   comment = Testing
   path = /shares/test
   valid users = root deckard
   public = no
   writable = yes
   printable = no
   create mask = 0765