[Samba] getent not working correctly

[Sean Patrick Ingles]

Ken - 

I have rebooted, still the same.
I don't notice any nscd daemons running at anytime as well

Thanks for your help!

-SP

-----Original Message-----
From: Hall, Ken (ECSS) [mailto:KeHall at exchange.ml.com] 
Sent: Monday, November 04, 2002 11:10 AM
To: Sean Patrick Ingles; samba at samba.org
Subject: RE: [Samba] getent not working correctly


All looks fine, but did you reboot after changing nsswitch.conf?

When I was testing both winbind and ldap nsswitch, I found that the mechanism caches lookups, so changes to the config weren't always recognized.  It would work, not work, work, etc., and it drove me crazy till I found out about the nscd daemons.

I'm not sure this is your problem, but it sounds a lot like what I saw, so I thought I'd ask.

> -----Original Message-----
> From: Sean Patrick Ingles [mailto:ingless at visionsys.com]
> Sent: Monday, November 04, 2002 10:19 AM
> To: Hall, Ken (ECSS); samba at samba.org
> Subject: RE: [Samba] getent not working correctly
> 
> 
> Here is my /etc/nsswitch.conf (abbreviated):
> 
> passwd:     files winbind
> shadow:     files winbind
> group:      files winbind
> 
> I first start smbd -D and nmbd -D
> 
> Then I start winbindd
> 
> Then I join the domain (smbpasswd -j DOMAIN -r
> DOMAINCONTROLLER -U Administrator) It works
> 
> Then I check my Secret (wbinfo -t) and it's good
> 
> Then I list users and groups (wbinfo -u and wbinfo -g) and it
> works fine
> 
> However I still cannot get "getent passwd" and "getent group" working.
> 
> I am 100% stumped
> 
> -SP
> 
> -----Original Message-----
> From: Hall, Ken (ECSS) [mailto:KeHall at exchange.ml.com]
> Sent: Friday, November 01, 2002 12:55 PM
> To: samba at samba.org
> Subject: RE: [Samba] getent not working correctly
> 
> 
> Did you reboot after starting winbindd?
> 
> Either do that, or try looking for the nameserver cache
> daemons (nscd), and kill them all.  (Don't worry, they'll restart.)
> 
> I had the same problem with nss_ldap, and it drove me NUTS
> till I found out about the cache mechanism.
> 
> > -----Original Message-----
> > From: Noel Kelly [mailto:nkelly at citrusnetworks.net]
> > Sent: Friday, November 01, 2002 12:46 PM
> > To: 'Sean Patrick Ingles'; samba at samba.org
> > Subject: RE: [Samba] getent not working correctly
> > 
> > 
> > You need getent to work.  This is really how Unix actually does the
> > authenticating - winbind is just the conduit to the M$ database.
> > 
> > Have you edited your /etc/nsswitch.conf correctly?  You need:
> > 
> > passwd:     files winbind nisplus
> > shadow:     files winbind nisplus
> > group:      files winbind nisplus
> > 
> > This will make Unix call winbind when looking for users/groups (this 
> > the mechanism that getent passwd/group runs).
> > 
> > HTH,
> > Noel
> >        
> > 
> > -----Original Message-----
> > From: Sean Patrick Ingles [mailto:ingless at visionsys.com]
> > Sent: 01 November 2002 15:41
> > To: samba at samba.org
> > Subject: [Samba] getent not working correctly
> > 
> > 
> > Hello again!
> > 
> > Ok, I've gotten wbinfo -u and wbinfo -g working great
> > 
> > Now I try to run getent passwd and getent group I get my local 
> > users/groups but not the ones on the Windows 2k Server Domain 
> > Controller and it just
> > hangs after listing the local ones.
> > 
> > I also tried authenticating a user and it worked I'm assuming
> > 
> > wbinfo -a DOMAIN+ingless at DOMAIN%"password" (The usernames here have
> > user at domain due to some M$ Active-Directory thing...) plaintext 
> > password authentication succeeded challenge/response password
> > authentication failed
> > Could not authenticate user DOMAIN+ingless at DOMAIN%"password" with
> > challenge/response
> > 
> > Do I need getent working, or is it safe to assume everything is 
> > functioning normally now?
> > 
> > Thanks!
> > 
> > -SP
> > 
> > ===========================================================
> >  
> >    \        /   ____/    / Sean Patrick Ingles
> >     \      /   /        / Jr. Network Engineer
> >      \    /   ___ /    /
> >       \  /       /    / Vision Systems, Inc.
> >       __/   ____/   _/ 142 State Street
> >                        Albany, NY 12207
> >     www.visionsys.com   Landline: +1 518.434.4300 x1406
> >   ingless at visionsys.com  Fax: +1 518.434.4304
> >  
> > ==========================================================
> > 
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 
> > ---
> > Incoming mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
> >  
> > 
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.408 / Virus Database: 230 - Release Date: 24/10/2002
> >  
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>