[Samba] ADS 2008 configuration

[Robert Freeman-Day]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/03/2011 08:54 AM, Inder wrote:
> Hi,
> 
> I am Inderjit, and have some issues with configuration of samba with ADS 2008.
> 
> I am able to connect to ADS 2008, but command "getent group" doesn't show always the output with ADS groups. We have more that 25000 users and domain controller is not located at same location.
> 
> Could you please give me a hints or suggestions, what can be changed to solve this issue.
> 
> Regards
> Inderjit

We have a large AD deployment as well.  I hope that someone in the
developer group can speak to this with authority, but I theorize that
there is a timeout implemented in a generalized query that broad.
Remember, you are asking for a listing of ALL groups in your AD
controller.  I can't even get Active Directory Users and Computers nor
Powershell commands to output every group.

If you are able to get a listing of a specific group:
"getent group specificgrpname"
Then winbind is working properly.

Why are you wanting that amount of output?  There may be other commands
(net) that can get you the info you want.

- -- 
________

Robert Freeman-Day

https://launchpad.net/~presgas
GPG Public Key:
http://keyserver.ubuntu.com:11371/pks/lookup?op=get&search=0xBA9DF9ED3E4C7D36
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk1MDdkACgkQup357T5MfTaH8gCaAoYygavzFWr/N2E3+xmX+NeR
mToAn1866SQFgwaqorjte+kHx94TONPR
=8QA9
-----END PGP SIGNATURE-----