[Samba] wbinfo not looking up groups in mixed MS NT/2k AD

[Andre Fernando Goldacker]

I've upgraded to samba-3.0.20b and it's working fine. nscd isn't
running.
I've noticed that, when I add / remove someone to / from the group
"internet", which in my case is the one I give internet access, it is
taking a while for the user appear / be removed in the group when I run
getent group, the user appears only after a while, more or less 10
minutes. Is there a setting or something in which it updates quicker??

Thanks in advance,

André


On Sat, 2005-10-15 at 17:24 -0600, John H Terpstra wrote:

> On Friday 14 October 2005 12:25, Andre Fernando Goldacker wrote:
> > Upgraded to samba-3.0.20b and it's working fine now.
> >
> > I've noticed that, when I add / remove someone to / from the group
> > "internet", which in my case is the one I give internet access, it is
> > taking a while for the user appear / be removed in the group, when I do
> > getent group the user only appears after a while, more or less 10
> > minutes. Is there a setting or something in which it updates quicker??
> 
> Pleae check that nscd is not running. It sounds like it may be.
> 
> - John T.
> 
> >
> > Thanks in advance,
> >
> > André
> >
> > On Fri, 2005-10-14 at 10:14 -0300, Felipe Augusto van de Wiel wrote:
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > > Hash: SHA1
> > >
> > > Andre Fernando Goldacker escreveu:
> > > [...]
> > >
> > > > wbinfo -n 'EARTH\testgroup'
> > > > Could not lookup name EARTH\testgroup
> > > >
> > > > I think that's the reason why my squid can't match users / groups.
> > > > My winbind log file reports me the following lines when I try to
> > > > match user/group from squid:
> > > >
> > > > [2005/10/13 16:46:48, 0] lib/util_sid.c:string_to_sid(301)
> > > >   string_to_sid: Sid Could not lookup name internet does not start
> > > > with 'S-'.
> > > > [2005/10/13 16:46:48, 1]
> > > > nsswitch/winbindd_sid.c:winbindd_sid_to_gid(241)
> > > >
> > > >   Could not cvt string to sid Could not lookup name internet
> > > > Any clues why I can lookup users, but not goups?
> > > > My AD has about 1100 users and 150 groups.
> > > > Any help will be much appreciated,
> > >
> > > 	Never saw this problem before, but looking at the logs,
> > > looks like your group entry does not have the proper field set,
> > > or the field is not right, in other words, it does not start
> > > with a "S-" like all the SID's.
> > >
> > > 	It is not much help, but perhaps could be a start,
> > > good luck! Kind regards,
> > >
> > > - --
> > > //////////
> > > // Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
> > > // CTI/Suporte - SEDU/PARANACIDADE
> > > // http://www.paranacidade.org.br/
> > > //////////
> > > -----BEGIN PGP SIGNATURE-----
> > > Version: GnuPG v1.4.1 (GNU/Linux)
> > > Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
> > >
> > > iD8DBQFDT69HCj65ZxU4gPQRAud7AKCXdp+qPvaiyDX10VuqO3WpftM5MgCfQ4rN
> > > t1bixV+pGNo1N9MTvz9SfsA=
> > > =AqZF
> > > -----END PGP SIGNATURE-----
>