[Samba] wbinfo not looking up groups in mixed MS NT/2k AD

[John H Terpstra]

On Friday 14 October 2005 12:25, Andre Fernando Goldacker wrote:
> Upgraded to samba-3.0.20b and it's working fine now.
>
> I've noticed that, when I add / remove someone to / from the group
> "internet", which in my case is the one I give internet access, it is
> taking a while for the user appear / be removed in the group, when I do
> getent group the user only appears after a while, more or less 10
> minutes. Is there a setting or something in which it updates quicker??

Pleae check that nscd is not running. It sounds like it may be.

- John T.

>
> Thanks in advance,
>
> André
>
> On Fri, 2005-10-14 at 10:14 -0300, Felipe Augusto van de Wiel wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Andre Fernando Goldacker escreveu:
> > [...]
> >
> > > wbinfo -n 'EARTH\testgroup'
> > > Could not lookup name EARTH\testgroup
> > >
> > > I think that's the reason why my squid can't match users / groups.
> > > My winbind log file reports me the following lines when I try to
> > > match user/group from squid:
> > >
> > > [2005/10/13 16:46:48, 0] lib/util_sid.c:string_to_sid(301)
> > >   string_to_sid: Sid Could not lookup name internet does not start
> > > with 'S-'.
> > > [2005/10/13 16:46:48, 1]
> > > nsswitch/winbindd_sid.c:winbindd_sid_to_gid(241)
> > >
> > >   Could not cvt string to sid Could not lookup name internet
> > > Any clues why I can lookup users, but not goups?
> > > My AD has about 1100 users and 150 groups.
> > > Any help will be much appreciated,
> >
> > 	Never saw this problem before, but looking at the logs,
> > looks like your group entry does not have the proper field set,
> > or the field is not right, in other words, it does not start
> > with a "S-" like all the SID's.
> >
> > 	It is not much help, but perhaps could be a start,
> > good luck! Kind regards,
> >
> > - --
> > //////////
> > // Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
> > // CTI/Suporte - SEDU/PARANACIDADE
> > // http://www.paranacidade.org.br/
> > //////////
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.1 (GNU/Linux)
> > Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
> >
> > iD8DBQFDT69HCj65ZxU4gPQRAud7AKCXdp+qPvaiyDX10VuqO3WpftM5MgCfQ4rN
> > t1bixV+pGNo1N9MTvz9SfsA=
> > =AqZF
> > -----END PGP SIGNATURE-----

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, 2 Ed., ISBN: 0131882228
Samba-3 by Example, 2 Ed., ISBN: 0131882221X
Hardening Linux, ISBN: 0072254971
Other books in production.