[Samba] samba 2.2.8a problem with winbind and getent group
Phil.Wild at SEALCORP.com.au
Thu Sep 25 04:34:05 GMT 2003
Hi samba mailing list.
I am having a major problem with winbind. This is my first implementation
and I have exhausted samba documentation, google and newsgroup searches.
Please help if you can.
I am running samba 2.2.8a under Solaris 8 SPARC.
Source was compiled using gcc with winbind pam builtin-popot and challenge
I am only using samba for the winbind portion at this time.
various smb.conf settings
workgroup = SEALCORP
server string = peruxbu1
security = domain
wins server = 188.8.131.52
dns proxy = no
password server = pernt2 pernt1 pernt5
encrypt passwords = yes
winbind uid = 10000-20000
winbind gid = 10000-20000
template homedir = /export/home/%D/%U
template shell = /usr/bin/bash
winbind separator = +
winbind enum groups = no
winbind enum groups = no
winbind cache time = 15
winbind use default domain = yes
name resolve order = hosts lmhosts wins bcast
winbind seems to be running correctly
Secret is good
Under NT, all users have a primary group of "Domain Users"
If I run getent passwd I see what appears to be all the users. A sample
A getent group takes forever to return
A getent group | grep Domain returns the following:
Domain Admins:x:10206:<removed admin account names from email>
A wbinfo -g | grep Domain returns the following:
Anyone know why I would be losing the last group when using getent?
Also, why would a getent group take forever to return (like a minute).
Time wbinfo -g | wc -l
Returns a count of 456 lines and takes .068ms to return
Time getent group | wc -l
Returns a count of 229 lines and takes 1m34.501s to return
I am running winbindd with -I -d4 to see debug information for the above and
all I get from the last command is:
[ 1101]: getpwnam yeot
[ 1605]: setgrent
[ 1605]: getgrent
[ 1605]: endgrent
Sealcorp Holdings Ltd
Tel: 08 9415 5595
Mob: 0400 466 952
Email: phil.wild at sealcorp.com.au
This message and any files transmitted with it are confidential and should be read only by those
persons to whom it is addressed.
If you have received this message in error, please notify us immediately by way of reply. Please
also destroy and delete the message from your computer. Any unauthorised form of reproduction
of this message is strictly prohibited.
It is the duty of the recipient to virus scan and otherwise test the information provided before
loading onto any computer system.
SEALCORP does not warrant that the information is free of a virus or any other defect or error.
SEALCORP is not liable for the proper and complete transmission of the information contained in
this communication, nor for any delay in its receipt.
Any views expressed in this message are those of the individual sender, except where the sender
specifically states them to be the views of SEALCORP.
More information about the samba