[Samba] samba 2.2.8a problem with winbind and getent group

[Wild, Phil]

Hi samba mailing list.
 
I am having a major problem with winbind. This is my first implementation
and I have exhausted samba documentation, google and newsgroup searches.
Please help if you can.
 
 
I am running samba 2.2.8a under Solaris 8 SPARC.
 
Source was compiled using gcc with winbind pam builtin-popot and challenge
options.
 
I am only using samba for the winbind portion at this time.
 
various smb.conf settings
 
workgroup = SEALCORP
server string = peruxbu1
security = domain
wins server = 125.1.18.12
dns proxy = no
password server = pernt2 pernt1 pernt5
encrypt passwords = yes
winbind uid = 10000-20000
winbind gid = 10000-20000
template homedir = /export/home/%D/%U
template shell = /usr/bin/bash
winbind separator = +
winbind enum groups = no
winbind enum groups = no
winbind cache time = 15
winbind use default domain = yes
name resolve order = hosts lmhosts wins bcast
 
winbind seems to be running correctly
 
wbinfo -t
Secret is good
 
Under NT, all users have a primary group of "Domain Users"
 
If I run getent passwd I see what appears to be all the users. A sample
appears below
 
YeoT:x:10925:10000:Trent Yeo:/export/home/SEALCORP/yeot:/usr/bin/bash
YongA:x:10926:10000:Amy Yong:/export/home/SEALCORP/yonga:/usr/bin/bash
YorgT:x:10927:10000:Tony Yorg:/export/home/SEALCORP/yorgt:/usr/bin/bash
YorkR:x:10928:10000:Rowena York:/export/home/SEALCORP/yorkr:/usr/bin/bash
YoungerN:x:10929:10000:Neil
Younger:/export/home/SEALCORP/youngern:/usr/bin/bash
 
 
A getent group takes forever to return 
A getent group | grep Domain returns the following:
 
Domain Admins:x:10206:<removed admin account names from email>
Domain Guests:x:10207:Guest
 
 
A wbinfo -g | grep Domain returns the following:
 
Domain Admins
Domain Guests
Domain Users
 
Anyone know why I would be losing the last group when using getent?
 
Also, why would a getent group take forever to return (like a minute).
 
Time wbinfo -g | wc -l
Returns a count of 456 lines and takes .068ms to return
 
Time getent group | wc -l
Returns a count of 229 lines and takes 1m34.501s to return
 
 
I am running winbindd with -I -d4 to see debug information for the above and
all I get from the last command is:
 
[ 1101]: getpwnam yeot
[ 1605]: setgrent
[ 1605]: getgrent
[ 1605]: endgrent
 
 
Cheers
 
Phil
 
--
Phil Wild
Sealcorp Holdings Ltd
Tel: 08 9415 5595
Mob: 0400 466 952
Email: phil.wild at sealcorp.com.au
 


================================================================================================
                                     IMPORTANT INFORMATION

This message and any files transmitted with it are confidential and should be read only by those
persons to whom it is addressed.   
If you have received this message in error, please notify us immediately by way of reply. Please
also destroy and delete the message from your computer. Any unauthorised form of reproduction
of this message is strictly prohibited.

It is the duty of the recipient to virus scan and otherwise test the information provided before
loading onto any computer system.  
SEALCORP does not warrant that the information is free of a virus or any other defect or error.

SEALCORP is not liable for the proper and complete transmission of the information contained in
this communication, nor for any delay in its receipt.

Any views expressed in this message are those of the individual sender, except where the sender
specifically states them to be the views of SEALCORP.

================================================================================================