[Samba] Re: ldap / username issue

Chris McKeever techjedi at gmail.com
Wed Feb 23 23:13:48 GMT 2005


final note until I knock my head against the wall  -
I can chown agent-guest file-name -- which means that the
openldap/account handshake is working -- why doesnt getent passwd see
certain accounts!??

-rw-r--r--    1 agent-gu root       253465 Feb 23 16:55 getent.passwd


On Wed, 23 Feb 2005 16:59:51 -0600, Chris McKeever <techjedi at gmail.com> wrote:
> some more information:
> 
> if I 'getent shadow' - I can find the accounts in question, but getent
> passwd just does not work - however, there are other accounts in the
> LDAP, added the same way, and they show up in the 'getent passwd'
> 
> ideas?
> 
> 
> On Wed, 23 Feb 2005 15:39:35 -0600, Chris McKeever <techjedi at gmail.com> wrote:
> > On Tue, 22 Feb 2005 22:47:43 -0700, Craig White <craigwhite at azapple.com> wrote:
> > > On Tue, 2005-02-22 at 09:34 -0600, Chris McKeever wrote:
> > > > wondering if anyone has any suggestions on this - beating my head
> > > > against the wall - thanks
> > > >
> > > >
> > > > On Mon, 21 Feb 2005 08:11:48 -0600, Chris McKeever <techjedi at gmail.com> wrote:
> > > > > thanks for the reply -
> > > > > nscd is not running, nor is installed
> > > > >
> > > > > On Mon, 21 Feb 2005 08:57:38 -0500, Adam Tauno Williams
> > > > > <adam at morrison-ind.com> wrote:
> > > > > > > with some more tinkering I was able to recreate the  issue --
> > > > > > > delete an account out of ldap, readd it and it will not appear via getent passwd
> > > > > > > any ideas??
> > > > > >
> > > > > > Is nscd running?
> > > ----
> > > Methinks that you should be looking at your DSA with some type of GUI
> > > like GQ or phpldapadmin - where you might discover subtle differences in
> > > the entries that are causing this behavior.
> > >
> >
> > I pulled those using ldapsearch and JAVA LDAP BROWSER = I posted the
> > results a couple posts ago - as far as I can see, they look identical
> > --- any ideas?  I cant seem to figure this out at all..thanks
> >
> >
> > dn: uid=cgmckeever, ou=People, dc=prupref,dc=com        dn: uid=agent-guest,
> > ou=People, dc=prupref,dc=com
> > objectClass: top                                        objectClass: top
> > objectClass: person                                     objectClass: person
> > objectClass: organizationalPerson                       objectClass: organizationalPerson
> > objectClass: inetOrgPerson                              objectClass: inetOrgPerson
> > objectClass: account                                    objectClass: account
> > objectClass: posixaccount                               objectClass: posixaccount
> > objectClass: shadowaccount                              objectClass: shadowaccount
> > objectClass: kerberosSecurityObject                     objectClass: kerberosSecurityObject
> > objectClass: sambaAccount                               objectClass: sambaAccount
> > sn: McKeever                                            sn: guest
> > givenName: Chris McKeever                               givenName: agent guest
> > mail: cgmckeever at prupref.com                            mail: website at prupref.com
> > shadowLastChange: 11761                                 shadowLastChange: 11761
> > shadowMin: -1                                           shadowMin: -1
> > shadowMax: 99999                                        shadowMax: 99999
> > shadowWarning: -1                                       shadowWarning: -1
> > shadowInactive: -1                                      shadowInactive: -1
> > shadowExpire: -1                                        shadowExpire: -1
> > shadowFlag: 7100670                                     shadowFlag: 7100670
> > krbName: cgmckeever at prupref.com                         krbName: website at prupref.com
> > loginShell: /bin/false                                  loginShell: /bin/false
> > uidNumber: 1277                                         uidNumber: 49344
> > gidNumber: 1002                                         gidNumber: 1002
> > homeDirectory: /home/                                   homeDirectory: /home/
> > gecos: Chris McKeever                                   gecos: agent guest
> > creatorsName: cn=root,dc=prupref,dc=com                 creatorsName:
> > cn=root,dc=prupref,dc=com
> > createTimestamp: 20030502214502Z                        createTimestamp: 20050218204327Z
> > userPassword:: e01ENX1IZk8z                             userPassword:: e01ENX01UlhmRF
> > uid: cgmckeever                                         uid: agent-guest
> > pwdLastSet: 1093903956                                  pwdLastSet: 1108759458
> > logonTime: 0                                            logonTime: 0
> > logoffTime: 0                                           logoffTime: 2147483647
> > kickoffTime: 0                                          kickoffTime: 2147483647
> > pwdCanChange: 0                                         pwdCanChange: 0
> > displayName: Chris McKeever                             displayName: agent guest
> > cn: Chris McKeever                                      cn: agent guest
> > rid: 3554                                               rid: 99688
> > primaryGroupID: 3005                                    primaryGroupID: 3005
> > lmPassword: 6E265BE9                                    lmPassword: A356673D
> > ntPassword: 95A69025                                    ntPassword: 2E6E2DA74
> > acctFlags: [UX         ]                                acctFlags: [UX         ]
> > pwdMustChange: 108696195100                             pwdMustChange: 108696195100
> > modifiersName: cn=root,dc=prupref,dc=com                modifiersName:
> > cn=root,dc=prupref,dc=com
> > modifyTimestamp: 20040830221237Z                        modifyTimestamp: 20050218204419Z
> >
> > > There are of course limits on the number of records returned from an
> > > ldap query and I don't have a DSA that would reach those limits to
> > > conduct experiments.
> > >
> > > Craig
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  https://lists.samba.org/mailman/listinfo/samba
> > >
> >
> > --
> > ----------------------------------
> > please respond to the list .. if you need to contact me direct
> > cgmckeever is the account
> > prupref.com is the domain
> >
> > <A href="http://www.prupref.com">Simply Chicago Real Estate</A>
> >
> 
> --
> ----------------------------------
> please respond to the list .. if you need to contact me direct
> cgmckeever is the account
> prupref.com is the domain
> 
> <A href="http://www.prupref.com">Simply Chicago Real Estate</A>
> 


-- 
----------------------------------
please respond to the list .. if you need to contact me direct
cgmckeever is the account
prupref.com is the domain

<A href="http://www.prupref.com">Simply Chicago Real Estate</A>


More information about the samba mailing list