[Samba] winbind: group name doesn't map to a SID, but gid does
Jonathan C. Detert
detertj at msoe.edu
Thu Aug 10 14:07:31 GMT 2006
I'm using winbind v3.0.22 on Debian Linux as a source for nss info.
I have a group that was once known by winbind, but is no more:
------ beging shell except ------
# ls -ld ./
drwxrws--- 10 root $MND000-TT227MV5K24I 4096 2006-05-10 15:41 ./
------ end shell except ------
It must have been known, as I was the one who chgrp'ed the dir
I know what the group name is supposed to be. When I look it up in
MsAD UsersNGroups, I see it has unix attribute gid = 29922.
"wbinfo -G 29922" produces the sid.
"wbinfo -s <thesid>" produces:
the group's RID shown above, with domain name prefixed, and " 2"
"wbinfo -n <posixgroupname>" produces:
"Could not lookup name <posixgroupname>"
Pertinent smb.conf entries:
winbind enum groups = yes
winbind enum users = yes
winbind nested groups = yes
winbind separator = +
winbind use default domain = yes
winbind nss info = sfu
idmap gid = 500-45000
idmap uid = 500-45000
idmap backend = ad
Any idea what is wrong? I restarted winbind, but that didn't help. I
stopped winbind, removed the winbindd_idmap.tdb, and then restarted
winbind, but the groupname is still not found.
IT Systems Administrator, Milwaukee School of Engineering
1025 N. Broadway, Milwaukee, Wisconsin 53202, U.S.A.
More information about the samba