[Samba] Winbind problem revisited

Luke Mewburn luke at mewburn.net
Wed Dec 22 13:56:50 GMT 2004

On Tue, Dec 21, 2004 at 01:49:46PM -0600, Brian Kesting wrote:
  | -----------/etc/nsswitch.conf---------------------
  | passwd: compat winbind
  | group:  files dns compat winbind
  | shadow: files winbind

[digression about nsswitch]

On various nsswitch implementations (including the canonical
implementation on Solaris, and the NetBSD version), it's not
supported to list any other sources for a given database
at the same time as "compat", and "compat" only makes sense
for the databases "passwd" and "group".

If you're not using the "+/-" syntax in /etc/passwd and /etc/group,
just use "files" instead of "compat".  Otherwise, you should try
something like:
	passwd: compat
	passwd_compat: winbind
	group: compat
	group_compat: dns winbind

passwd_compat and group_compat specify the sources to lookup
stuff for the "+" and "-" entries in /etc/passwd & /etc/group

I suspect you don't want "dns" in group/group_compat either,
unless you're running Hesiod at your site.

(You can't list "files" or "compat" as sources for "passwd_compat"
or "group_compat" as it doesn't make sense).
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba/attachments/20041223/e20c3e44/attachment.bin

More information about the samba mailing list