[Samba] getent not working correctly
Sean Patrick Ingles
ingless at visionsys.com
Mon Nov 4 16:03:58 GMT 2002
I verified that the libraries were in the /lib folder and symlinked, and here is the output from ldconfig:
[root at tux samba]# ldconfig -v | grep winbind
libnss_winbind.so -> libnss_winbind.so
I restarted winbindd and typed "getent passwd" and it just lists my local passwords and hangs.
Nothing is generated in my log.winbindd when I do this either.
I am also noticing that _occasionally_ the box will not allow anyone to login until after I kill winbindd...
For reference, here is my /etc/pam.d/login:
[root at tux pam.d]# cat login
#%PAM-1.0
auth required /lib/security/pam_securetty.so
auth sufficient /lib/security/pam_winbind.so
auth sufficient /lib/security/pam_unix.so use_first_pass
auth required /lib/security/pam_stack.so service=system-auth
auth required /lib/security/pam_nologin.so
account sufficient /lib/security/pam_winbind.so
account required /lib/security/pam_stack.so service=system-auth
password required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_stack.so service=system-auth
session optional /lib/security/pam_console.so
[root at tux pam.d]#
Here is what I have for my smb.conf as well:
[root at tux pam.d]# cat /usr/local/samba/lib/smb.conf
[global]
workgroup = VSIONLINE
server string = Samba %v -- TEST --
security = domain
password server = vsi-vsi-albany
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind separator = +
winbind cache time = 10
winbind enum users = Yes
winbind enum groups = Yes
[root at tux pam.d]#
-SP
-----Original Message-----
From: Noel Kelly [mailto:nkelly at citrusnetworks.net]
Sent: Monday, November 04, 2002 10:39 AM
To: Sean Patrick Ingles; Hall, Ken (ECSS); samba at samba.org
Subject: RE: [Samba] getent not working correctly
Have you copied libnss_winbind.so from the nsswitch directory to /lib ? Also make a soft link to /lib/libnss_winbind.so.2 and then run 'ldconfig -v
| grep winbind' to make sure the libraries are picked up.
Restart winbind and watch your log.winbindd for messages as you run getent.
HTH
Noel
-----Original Message-----
From: Sean Patrick Ingles [mailto:ingless at visionsys.com]
Sent: 04 November 2002 15:19
To: Hall, Ken (ECSS); samba at samba.org
Subject: RE: [Samba] getent not working correctly
Here is my /etc/nsswitch.conf (abbreviated):
passwd: files winbind
shadow: files winbind
group: files winbind
I first start smbd -D and nmbd -D
Then I start winbindd
Then I join the domain (smbpasswd -j DOMAIN -r DOMAINCONTROLLER -U
Administrator) It works
Then I check my Secret (wbinfo -t) and it's good
Then I list users and groups (wbinfo -u and wbinfo -g) and it works fine
However I still cannot get "getent passwd" and "getent group" working.
I am 100% stumped
-SP
-----Original Message-----
From: Hall, Ken (ECSS) [mailto:KeHall at exchange.ml.com]
Sent: Friday, November 01, 2002 12:55 PM
To: samba at samba.org
Subject: RE: [Samba] getent not working correctly
Did you reboot after starting winbindd?
Either do that, or try looking for the nameserver cache daemons (nscd), and kill them all. (Don't worry, they'll restart.)
I had the same problem with nss_ldap, and it drove me NUTS till I found out about the cache mechanism.
> -----Original Message-----
> From: Noel Kelly [mailto:nkelly at citrusnetworks.net]
> Sent: Friday, November 01, 2002 12:46 PM
> To: 'Sean Patrick Ingles'; samba at samba.org
> Subject: RE: [Samba] getent not working correctly
>
>
> You need getent to work. This is really how Unix actually does the
> authenticating - winbind is just the conduit to the M$ database.
>
> Have you edited your /etc/nsswitch.conf correctly? You need:
>
> passwd: files winbind nisplus
> shadow: files winbind nisplus
> group: files winbind nisplus
>
> This will make Unix call winbind when looking for users/groups (this
> the mechanism that getent passwd/group runs).
>
> HTH,
> Noel
>
>
> -----Original Message-----
> From: Sean Patrick Ingles [mailto:ingless at visionsys.com]
> Sent: 01 November 2002 15:41
> To: samba at samba.org
> Subject: [Samba] getent not working correctly
>
>
> Hello again!
>
> Ok, I've gotten wbinfo -u and wbinfo -g working great
>
> Now I try to run getent passwd and getent group I get my local
> users/groups but not the ones on the Windows 2k Server Domain
> Controller and it just
> hangs after listing the local ones.
>
> I also tried authenticating a user and it worked I'm assuming
>
> wbinfo -a DOMAIN+ingless at DOMAIN%"password" (The usernames here have
> user at domain due to some M$ Active-Directory thing...) plaintext
> password authentication succeeded challenge/response password
> authentication failed
> Could not authenticate user DOMAIN+ingless at DOMAIN%"password" with
> challenge/response
>
> Do I need getent working, or is it safe to assume everything is
> functioning normally now?
>
> Thanks!
>
> -SP
>
> ===========================================================
>
> \ / ____/ / Sean Patrick Ingles
> \ / / / Jr. Network Engineer
> \ / ___ / /
> \ / / / Vision Systems, Inc.
> __/ ____/ _/ 142 State Street
> Albany, NY 12207
> www.visionsys.com Landline: +1 518.434.4300 x1406
> ingless at visionsys.com Fax: +1 518.434.4304
>
> ==========================================================
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: http://lists.samba.org/mailman/listinfo/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: http://lists.samba.org/mailman/listinfo/samba
>
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.408 / Virus Database: 230 - Release Date: 24/10/2002
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: http://lists.samba.org/mailman/listinfo/samba
>
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
More information about the samba
mailing list