[Samba] winbind question
daniel.jarboe at custserv.com
daniel.jarboe at custserv.com
Fri Oct 18 11:30:01 GMT 2002
>
>
>>>>every time a cron job runs I get this in my log.winbindd
>>>>[2002/10/17 13:45:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(815)
>>>> user 'root' does not exist
>>>>
>>>>the three important lines in my /etc/nsswitch.conf is:
>>>>passwd: files winbind nisplus
>>>>shadow: files nisplus
>>>>group: files winbind nisplus
>>>>
>>>This is probably due to looking up secondary groups (i.e. the group:
>>>line) not getpwnam() calls.
>>>
Okay, thank you, I think I finally get how this works:
When figuring out what groups jarboed is in, first /etc/groups gets hit
for secondary groups. *After that, winbind gets hit to see if jarboed
is in any other groups.* When "winbind use default domain = no" in
smb.conf (the default) winbind doesn't bother checking because there is
no domain associated with "jarboed", but when "winbind use default
domain = yes" in smb.conf, winbind will hit the PDC to determine what
groups MY_DOMAIN+jarboed is in and tack on the additional
MY_DOMAIN+Domain Users, etc, groups to the list of secondary groups for
jarboed?
And for system accounts that don't exist on the PDC (mostly all of
them), winbindd_getgroups just spits up the error that there is no such
domain user (like "root") to be in any groups?
~ Daniel
More information about the samba
mailing list