[Samba] getent group and net ads user info differs

[Cristian Saavedra]

Hello Kevin

The group is on the samba AD and i don't have nis installed on this server, the nsswitch.conf is this.

passwd:     files winbind
shadow:     files winbind
group:      files winbind

My OS is Centos 6.3

El 4/04/2013, a las 10:42, "Shaw, Kevin" <Kevin.Shaw at xerox.com> escribió:

> Cristian,
> 
> The group commercial is in /etc/group or NIS group?
> 
> cat /etc/group | grep lisanyurimicolta
> 
> ypcat -k group | grep lisanyurimicolta
> 
> If group is configured correctly I would look at /etc/nsswitch.conf. I don't know what OS you are running, this is where name switching is configured in Solaris.
> 
> HTH,
> 
> -Kevin
> 
> -----Original Message-----
> From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of Cristian Saavedra
> Sent: Thursday, April 04, 2013 7:45 AM
> To: samba at lists.samba.org
> Subject: [Samba] getent group and net ads user info differs
> 
> Hello
> 
> I have a samba 4.0.3 pdc and a samba 3.5.10 as a fileserver and i am  having an issue that i like to share with you.
> 
> I have a share son the samba 3 setup like this
> 
> [Comercial]
>        browsable = Yes
>        comment = Comercial
>        path = /shares2/Comercial
>        valid users = @Ingenieria, @Mercadeo, @Comercial, @SIIF, @Costos, administrador, backup
>        write list = @Comercial, @Mercadeo, @Ingenieria, administrador, claudiavillegas, manuelaparicio
>        read list = @Comercial, @SIIF, , at Almacen, @Costos, @Uruguay, @Ingenieria, backup
>        force create mode = 666
>        force directory mode = 777
> 	veto files = /*.exe/*.com/*.dll/*.mp3/*.bat/
> 
> As you can see the Comercial group is authorized to read and write, so i have this user lisanyurimicolta she is on the Comercial group:
> 
> [root at srvfs audit]# net ads user info lisanyurimicolta
> Domain Users
> TerminalServer
> politicas3
> SIIF
> Comercial
> [root at srvfs audit]#
> 
> srvfs is my samba 3.x server, but then she can't write on the share, so i'm executing a getent group to validate that she is on that group for the winbind, but i get this
> 
> [root at srvfs audit]# getent group comercial
> comercial:*:16777233:claralibreros,christiancano,danilocampo,anabedoya,guillerminagarcia,humbertocardona,marthamurillo,pruebas,yoancanabal,andreasaa,adrianazapata,jhonrealpe,maryamgamboa,jassonaperador,adolfotrullo,christhianjimenez,mariaguerrero,mariomunera,mauricioperdomo,melbaorejuela,paolagomez,richardordonez,ginagarces,juanagudelo,adrianalopez,andrespossu,dianaolano,yulymejia,edwinyepes,jenniferbazantes,ronaldduque,maribelgomez,linabanol,lauramulcue,johncastillo,luzgallego,giovannysotomayor,andresgutierrez,arlexcardona,jonathangaviria,victorianavia,andrescampino
> 
> Why is this happening? any suggestions? 
> 
> Thanks for your help.
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba