[Samba] Re: getent group 'Domain Users' hangs

[Marcel Mary]

"Gerald (Jerry) Carter" wrote:
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Wed, 23 Oct 2002, Marcel Mary wrote:
> 
> > getent group 'Domain Users' hangs forever as does an ls -l on
> > any new file created by a user belonging to that group.
> 
> How many users in the domain?

Indeed...

There seems to be the problem: about 1000, making the group
lookup result very long (~8KB) and hits a limit somewhere
between Solaris and nss_winbind (shrinking the Domain Users
group to a dozen of users confirmed it).

Unfortunately the smb.conf changes you recommended didn't
help here.

Any further idea/work-around/recommendation to support such
a user base?


--
Marcel
 
> > The smb.conf:
> > [global]
> > log level = 3
> 
> Set this to 0.
> 
> > workgroup = MARCO
> > netbios name = SELDON
> > admin users = root
> > encrypt passwords = yes
> > security = domain
> > winbind separator = |
> > winbind enum users = yes
> > winbind enum groups = yes
> 
> Set the previous two parameters to "no".
> 
> > winbind uid = 10000-20000
> > winbind gid = 10000-20000
> > winbind use default domain = yes
> 
> Definitely set this to "no"
> 
> > password server = *
> 
> cheers, jerry
>  ---------------------------------------------------------------------
>  Hewlett-Packard           ------------------------- http://www.hp.com
>  SAMBA Team                ---------------------- http://www.samba.org
>  GnuPG Key                 ---- http://www.plainjoe.org/gpg_public.asc
>  ISBN 0-672-32269-2        "SAMS Teach Yourself Samba in 24 Hours" 2ed
>  "I never saved anything for the swim back."     Ethan Hawk in Gattaca
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.0 (GNU/Linux)
> Comment: For info see http://quantumlab.net/pine_privacy_guard/
> 
> iD8DBQE9tqNRIR7qMdg1EfYRAmFfAJ4oq9cvi6k96Cz0wpWBgWmC6bvieACfZfJT
> 6s2xC+XjOkx2vNPPYbN2c4Y=
> =k8mw
> -----END PGP SIGNATURE-----