[Samba] how to make 'winbind nss info = sfu' work in v >= 3.0.26a

Gerald (Jerry) Carter jerry at samba.org
Wed Apr 16 22:07:39 GMT 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jonathan Detert wrote:
> At the suggestion of someone who replied offline, I tried replacing
> reference to 'sfu' with 'rfc2307', as well as converting to the newer
> idmap config directives.  However, I still can't resolve sids to uids.
> 
> Now, instead of complaining about not finding sfu.so, the log complains
> about not finding rfc2307.so:

 and then run How did you compile Samba ?  you need the
- --with-shared-modules=idmap_ad "make install" to get the
necessary bits.  You should see $(libdir)/nss_info/rfc2307.so
as a symlink to ../idmap/ad.so.

> 
> /* BEGIN log.wb-MYDOMAIN excerpt : */
> [2008/04/16 13:21:15, 5] nsswitch/nss_info.c:smb_register_idmap_nss(79)
>   smb_register_idmap_nss: Successfully added idmap nss backend 'template'
> [2008/04/16 13:21:15, 5] lib/module.c:smb_probe_module(108)
>   Probing module 'rfc2307'
> [2008/04/16 13:21:15, 5] lib/module.c:smb_probe_module(119)
>   Probing module 'rfc2307': Trying to load from /usr/lib/samba/nss_info/rfc2307.so
> [2008/04/16 13:21:15, 3] lib/module.c:do_smb_load_module(49)
>   Error loading module '/usr/lib/samba/nss_info/rfc2307.so': /usr/lib/samba/nss_info/rfc2307.so: cannot open shared object file: No such file or directory
> [2008/04/16 13:21:15, 3] nsswitch/nss_info.c:nss_init(209)
>   nss_init: no nss backends configured.  Defaulting to "template".
> /* END   log.wb-MYDOMAIN excerpt   */
> 
> It seems strange that log.winbindd-idmap says it successfully loaded 
> nss backend 'sfu':

Because the nss_info sfu and rfc2307 modules are built in the
idmap ad.so module and therefore initialized at the same time.
So if the idmap plugin is loaded first you are fine.  But
often in the parent winbindd process you will see it attempt to
load the nss_info module first which seems to be failing.





cheers, jerry
- --
=====================================================================
Samba                                    ------- http://www.samba.org
Likewise Software          ---------  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIBnirIR7qMdg1EfYRAt0zAJwKgTQMeiWho9TxfDOoV63voghRHACdGzEH
GwWTI+5+gfk+ismcwaX7Y5c=
=qssH
-----END PGP SIGNATURE-----


More information about the samba mailing list