[Samba] Why doesn't getent passwd work for me?

[Don V]

Hi Joseph,

I have run into this issue twice with two different causes.  wbinfo returns
data, but getent does not return anything but local account/ grp info. 
First time it was due to a samba-common issue.  I removed samba-common via
rpm and ran an up2date -i to re-install the latest version and that
corrected it.  The cause of the issue on that occasion was due to a securty
update on my PDC.  On the most recent occasion - just this morning, the
issue was a corrupt idmap database.  To correct the issue, I archived the
/var/cache/samba/winbindd_idmap.tdb file, restarted winbind and all was
well.  I hope this helps, as I was pulling my hair out trying to trace the
cause!!!


Jason M. Kusar wrote:
> 
> 
> ----- samba at piven.org wrote:
>> Joseph Slone wrote:
>> > I've attached a samba 3 (3.023c-2.el5.2.0.2) server to my windows
>> 2003
>> > domain.  The domain's functional level is Windows 2000 Native.
>> > The server is running Centos 5.   This configuration worked before I
>> rebuild
>> > the server from Fedora Core 4 what ever version of samba it had.
>> > [snip]
>> > 
>> > wbinfo -u and wbinfo -g returns the user and group list I expected.
>> > 
>> > wbinfo --authenticate=name%password  returns
>> > 
>> > plaintext password authentication succeeded
>> > challenge/response password authentication succeeded
>> > 
>> > This concerns me, shouldn't the password be encrypted?
>> > 
>> > getent passwd name  returns nothing.   getent passwd  returns a list
>> of
>> > local accounts.
>> 
>> What does your /etc/nsswitch.conf look like?  You need to have the 
>> winbind service specified for passwd and group lookups in order for 
>> getent and friends to check winbind as well as the local files.
>> 
>> In /etc/nsswitch.conf, you should see lines looking like
>> 
>> passwd: files winbind
>> group:	files winbind
> 
> I actually just had the same problem with CentOS5 recently.  If you
> already have nsswitch configured properly as above, check that
> libnss_winbind.so is in the proper place.  The instructions I found said
> to put it in /usr/lib64/nss and create a symlink to it called
> libnss_winbind.so.2.  However, I experienced the same problems as you, but
> I found that if I symlinked both files to /usr/lib64, the problem went
> away.  Meaning that I have the following four entries (3 of which are
> symlinks):
> 
> /usr/lib64/libnss_winbind.so
> /usr/lib64/libnss_winbind.so.2
> /usr/lib64/nss/libnss_winbind.so
> /usr/lib64/nss/libnss_winbind.so.2
> 
> Of course, if you're using 32-bit Centos, the path will be /usr/lib
> instead of /usr/lib64.  Hope this helps!
> 
> --Jason
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
> 

-- 
View this message in context: http://www.nabble.com/Why-doesn%27t-getent-passwd-work-for-me--tf4287588.html#a12410499
Sent from the Samba - General mailing list archive at Nabble.com.