[Samba] Winbind group ID problems
GUNELP at inel.gov
GUNELP at inel.gov
Wed Jun 18 22:31:35 GMT 2003
Thank you in advance for anyone who responds to this message.
I am having a problem with winbind not playing nice with groups. Here is
my configuration:
RedHat Linux 8.0 with the redhat samba packages: samba-2.2.7-5.8.0
When I log into the machine using ssh I get the following error:
id: cannot find name for group ID 10000
This should be resolved to the "Domain Users" group, but it does not seem
to be working. I have searched for a solution to the problem, but have not
found any fix.
Here is my configuration and what I have tried:
#=============== Winbind configuration ==================
# separate domain and username with '+', like DOMAIN+username
winbind separator = +
# use uids from 10000 to 30000 for domain users
winbind uid = 10000-30000
# use gids from 10000 to 30000 for domain groups
winbind gid = 10000-30000
# allow enumeration or winbind users and groups
# might need to disable these next two for performance
# reasons of the winbind host
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
# give winbind users a real shell (only needed if they have
telnet/sshd/etc... access)
template homedir = /home/winnt/%D/%U
template shell = /bin/bash
obey pam restrictions = yes
#================ End Winbind config =====================
when I do wbinfo -u it will list all the users of the domain, which is
around 1000 users or more. When I run the wbinfo -g it will list all the
groups, but the 'Domain XXXX' groups. I then tried wbinfo -n 'Domain
Users' and got back "S-1-5-21-26508437-853423744-273882866-513 2".
So if I then run the command "wbinfo -Y
'S-1-5-21-26508437-853423744-273882866-513 2'" I will get back gid 10000,
which is what the group should be resolved to. I cannot understand why I
get "id: cannot find name for group ID 10000" if everything else works.
I hope that I have made some sense. Can anyone help me out with this
problem?
Thank you
Patrick Gunerud
More information about the samba
mailing list