[Samba] winbind fails "getent passwd eknuds"

[Jonathan C. Detert]

* Eric Knudstrup <eric at knudstrup.org> [070307 20:16]:
> Now I'm trying to make it so the Samba accounts can be used for user 
> logins as well.  Unfortunately I'm having a bit of trouble with winbind.
> Whenever I try to do a "getent passwd eknuds", it find the entry in the 
> ldap sam, but the winbind log for my domain comes up with this and the 
> getent displays nothing:

what did you set for the 'idmap backend' parameter in your smb.conf
file?

What does

        wbinfo -u 

produce?  It should list every username known to your ldap backend.

what do these produce:

        wbinfo -n eknuds
        wbinfo -s S-1-5-21-3868333197-704855571-3977030669-3012

On rare occasion, I have a similar problem, and typically, if I stop winbind,
delete the local /var/lib/samba/winbindd_idmap.tdb and restart winbind,
the problem is solved.  I'm running v3.0.22.

- Jon

> [2007/03/07 15:48:46, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541)
> init_sam_from_ldap: Entry found for user: eknuds
> [2007/03/07 15:48:46, 0] passdb/pdb_get_set.c:pdb_get_group_sid(164)
> pdb_get_group_sid: Failed to find Unix account for eknuds
> [2007/03/07 15:48:46, 1] 
> nsswitch/winbindd_user.c:winbindd_dual_userinfo(151)
> error getting user info for sid 
> S-1-5-21-3868333197-704855571-3977030669-3012
> 
> I have my nsswitch.conf set to:
> passwd: files winbind
> shadow: files winbind
> group:  files winbind
> 
> #passwd:        compat
> #group: compat
> 
> hosts:  files wins dns
> networks:       files dns
> 
> services:       files ldap
> protocols:      files
> rpc:    files
> ethers: files
> netmasks:       files
> netgroup:       files ldap
> publickey:      files
> 
> bootparams:     files
> automount:      files nis
> aliases:        files ldap
> passwd_compat:  winbind
> group_compat:   winbind
> 
> Do I need to bite the bullet and add accounts to the local Unix passwd 
> file?
> 
> Thanks,
> 
> Eric
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
Happy Landings,

Jon Detert
IT Systems Administrator, Milwaukee School of Engineering
1025 N. Broadway, Milwaukee, Wisconsin 53202, U.S.A.