[Samba] getent acting unreliable with idmap_ad
robert.grasso+nv at cedrat.com
Fri Jul 30 09:45:00 MDT 2010
I personally solved my stability issues when, rather than letting Samba find automatically the AD servers, I stated them clearly :
- I stated clearly my "password server =" in smb.conf
- I stated clearly my /etc/krb5.conf
I am running on CentOS 5.5, samba 3.0.33.
Apart from that : I have installed SFU on my Windows 2003 AD servers; to me, it seems that getent passwd <username> yields a result
for the accounts which have an Unix account declared in AD through the "Unix attributes", and only for these ones (?).
Robert GRASSO System engineer
15 Chemin de Malacher - Inovallée - 38246 MEYLAN cedex - FRANCE
Phone: +33 (0)4 76 90 50 45 - Fax: +33 (0)4 56 38 08 30
mailto:robert.grasso at cedrat.com - http://www.cedrat.com
> -----Message d'origine-----
> De : samba-bounces at lists.samba.org
> [mailto:samba-bounces at lists.samba.org] De la part de Nico De Ranter
> Envoyé : 30 juillet 2010 13:44
> À : samba at lists.samba.org
> Objet : [Samba] getent acting unreliable with idmap_ad
> I'm trying to get my linux boxes to authenticate to AD using
> winbind. I
> need to get my uid's from AD so I'm using idmap_ad.
> I got to the point where 'getent passwd' shows me the list of
> unix users
> from AD with all correct details, however when I do 'getent passwd
> <username>' for any username from the list returned by
> 'getent passwd' I
> get an empty reply (getent returns error code 2) and I can't
> login using
> those users.
> As a matter of fact on one of my testmachines it works sometimes.
> 'getent passwd nico' will return my user details and I can logon
> properly but when the system has been quiet for some time it seems to
> forget about the account again.
> Anybody seen this before? Any suggestions on how to debug this?
> I'm trying this on Ubuntu 9.10 and 10.04.
> Thanks in advance,
> With kind regards
> Nico De Ranter
> Senior System Administrator
> Techsoft Centre
> Technology and Software Centre Europe
> The Corporate Village - Da Vincilaan 7-D1 - B-1935 Zaventem - Belgium
> Phone: +32 (0)2 700 8641
> Fax: +32 (0)2 700 8622
> E-mail: nico.deranter at eu.sony.com
> A division of Sony Europe (Belgium) N.V.
> VAT BE 0413.825.160 - RPR Brussels
> Fortis - BIC GEBABEBB - IBAN BE41293037680010
> The information contained in this message or any of its
> attachments may be confidential and is intended for the
> exclusive use of the addressee(s). Any disclosure,
> reproduction, distribution or other dissemination or use of
> this communication is strictly prohibited without the express
> permission of the sender. The views expressed in this email
> are those of the individual and not necessarily those of Sony
> or Sony affiliated companies. Sony email is for business use only.
> This email and any response may be monitored by Sony to be in
> compliance with Sony's global policies and standards
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
More information about the samba