[Samba] winbind question

daniel.jarboe at custserv.com daniel.jarboe at custserv.com
Fri Oct 18 11:30:01 GMT 2002


>
>
>>>>every time a cron job runs I get this in my log.winbindd
>>>>[2002/10/17 13:45:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(815)
>>>>  user 'root' does not exist
>>>>
>>>>the three important lines in my /etc/nsswitch.conf is:
>>>>passwd:     files winbind nisplus
>>>>shadow:     files nisplus
>>>>group:      files winbind nisplus
>>>>
>>>This is probably due to looking up secondary groups (i.e. the group:
>>>line) not getpwnam() calls.
>>>
Okay, thank you, I think I finally get how this works:
When figuring out what groups jarboed is in, first /etc/groups gets hit 
for secondary groups.  *After that, winbind gets hit to see if jarboed 
is in any other groups.*  When "winbind use default domain = no" in 
smb.conf (the default) winbind doesn't bother checking because there is 
no domain associated with "jarboed", but when "winbind use default 
domain = yes" in smb.conf, winbind will hit the PDC to determine what 
groups MY_DOMAIN+jarboed is in and tack on the additional 
MY_DOMAIN+Domain Users, etc, groups to the list of secondary groups for 
jarboed?

And for system accounts that don't exist on the PDC (mostly all of 
them), winbindd_getgroups just spits up the error that there is no such 
domain user (like "root") to be in any groups?

~ Daniel




More information about the samba mailing list