[Samba] Getent passwd don't display domain users

L.P.H. van Belle belle at bazuin.nl
Tue Dec 17 07:11:52 MST 2013


Pointer.... 
you CAN add a domain group to a local group.   ( local = BUILTIN  ) 
you CANNOT add a localgroup to a domain group. 

for the getent passwd 

what is the content of /etc/nsswitch.conf  ( of where it is in centos. 

should have something like:
passwd:         compat winbind
group:          compat winbind
shadow:         compat
hosts:          files dns

if wbinfo -u isnt working, you did something wrong.. 
check the time on both servers. 
install ntp and point it to the ad server, this way you servers time is always te same. 


Louis


>-----Oorspronkelijk bericht-----
>Van: thiago at thiagocrepaldi.com 
>[mailto:samba-bounces at lists.samba.org] Namens Thiago Crepaldi
>Verzonden: dinsdag 17 december 2013 14:47
>Aan: Renzo Di Vincenzo
>CC: samba
>Onderwerp: Re: [Samba] Getent passwd don't display domain users
>
>Hi,
>
>I am facing the same issue on a Debian Wheezy with Samba 4.1.3, but I
>believe it was reported back in 2008 and there is also a bug 
>since 2010 -
>there is no fix nor workaround, though :(
>
>Can you compare your issue with the following reports to 
>confirm if that is
>what is going on in your case ?
>
>https://bugzilla.samba.org/show_bug.cgi?id=7167
>https://lists.samba.org/archive/samba/2008-October/144586.html
>https://lists.samba.org/archive/samba/2011-February/160876.html
>https://lists.samba.org/archive/samba/2013-September/175692.html
>
>Thiago
>
>
>On Tue, Dec 17, 2013 at 11:39 AM, Thiago Crepaldi 
><thiago at thiagocrepaldi.com
>> wrote:
>
>> Hi,
>>
>> I am facing the same issue on a Debian Wheezy with Samba 4.1.3, but I
>> believe it was reported back in 2008 and there is also a bug 
>since 2010 -
>> there is no fix nor workaround, though :(
>>
>> https://bugzilla.samba.org/show_bug.cgi?id=7167
>> https://lists.samba.org/archive/samba/2008-October/144586.html
>> https://lists.samba.org/archive/samba/2011-February/160876.html
>>  https://lists.samba.org/archive/samba/2013-September/175692.html
>>
>> Thiago
>>
>>
>> On Tue, Dec 17, 2013 at 11:23 AM, Renzo Di Vincenzo <
>> rdivincenzo at prossitalia.it> wrote:
>>
>>> I installed the following packages on Centos 6.x: samba4 
>samba4-winbind
>>> samba4-client  krb5-workstation samba4-winbind-clients.
>>> I have to join Centos to my 2008 domain as a member server.
>>> I followed this How-To
>>> https://wiki.samba.org/index.php/Samba/Domain_Member but 
>don't work fine.
>>> I have successfully joined Centos to my domain but "wbinfo -u" and
>>> "getent passwd" does not show domain users.
>>>
>>> I have tested kerberos with the following without success:
>>>
>>> [code]
>>> [root at centos ~]# kinit -V administrator at patrick.it
>>> Using default cache: /tmp/krb5cc_0
>>> Using principal: administrator at patrick.it
>>> Password for administrator at patrick.it:
>>> kinit: KDC reply did not match expectations while getting initial
>>> credentials
>>> [/code]
>>>
>>> While the following works well:
>>>
>>> [code]
>>> [root at centos ~]# net -U Administrator ads group -l
>>> Enter Administrator's password:
>>>
>>> Group name            Comment
>>> -----------------------------
>>> Administrators        Administrators have complete and unrestricted
>>> access to the computer/domain
>>> ..........
>>> [/code]
>>>
>>> Yum after the installation of the packages located in 
>/lib64 only the
>>> libssn_winbind.so.2 but the
>>>
>>> [root at centos lib64]# ldconfig -v | grep libnss_winbind
>>>
>>> display this
>>>
>>>      libnss_winbind.so.2 -> libnss_winbind.so.2
>>>
>>> how can I solve this problem?
>>>
>>>
>>>
>>>
>>>
>>> --
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>
>>
>>
>>
>> --
>> Thiago
>>
>
>
>
>-- 
>Thiago
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>



More information about the samba mailing list