[Samba] getent group return only local users

Hervé Hénoch h.henoch at isc84.org
Thu Feb 21 01:37:46 MST 2013


Yes I did.

It was a idmap problem ... The command works withe the following lines 
in smb.conf :

     idmap  *:backend = tdb
    idmap  *:range = 70001-80000
    idmap config SC:backend = ad
    idmap config SC:schema_mode = rfc2307
    idmap config SC:range = 500-40000

    winbind nss info = rfc2307
    winbind trusted domains only = no
    winbind use default domain = yes
    winbind enum users  = yes
    winbind enum groups = yes


I've suppressed "config" in the first two lines ... But an explanation 
would be welcome.

Thanks

Le 20/02/2013 18:20, Ricky Nance a écrit :
> Did you make the appropriate symlinks for winbind.so ? I use Ubuntu 
> and mine look like the following:
>
> root at server:/lib/x86_64-linux-gnu# ls -alh | grep winbind
> lrwxrwxrwx  1 root root    40 Nov 23 14:45 libnss_winbind.so -> 
> /usr/local/samba/lib/libnss_winbind.so.2
> lrwxrwxrwx  1 root root    40 Nov 23 14:45 libnss_winbind.so.2 -> 
> /usr/local/samba/lib/libnss_winbind.so.2
>
> However your distribution may store them in a different location, so 
> first you need to find out where your other libnss files are at, and 
> then cd to that directory (in my example, cd /lib/x86_64-linux-gnu ) 
> and then do a ln -s /usr/local/samba/lib/libnss_winbind.so.2 ./ && ln 
> -s /usr/local/samba/lib/libnss_winbind.so.2 ./libnss_winbind.so
>
> (that is a lower case LN not IN)
>
> Ricky
>
>
> On Wed, Feb 20, 2013 at 8:24 AM, Hervé Hénoch <h.henoch at isc84.org 
> <mailto:h.henoch at isc84.org>> wrote:
>
>     Hello
>
>     I use S4 file server with nsswitch.conf (ad server is another
>     Linux with S4) :
>
>     passwd:         compat winbind
>     group:          compat winbind
>
>     I wonder how it can be possible that :
>
>        * getent passwd is ok
>        * but getent group returns only local users (wbinfo -g is ok and
>          gives domain user)
>
>     Any idea ?
>
>     Regards
>
>     -- 
>
>     Hervé Hénoch
>     Responsable informatique
>     Institut Sainte Catherine
>     250 chemin de Baigne-Pieds
>     CS 80005 --- 84918 AVIGNON cedex 9
>     Téléphone : 04.90.27.57.44
>     -- 
>     To unsubscribe from this list go to the following URL and read the
>     instructions: https://lists.samba.org/mailman/options/samba
>
>
>
>
> -- 
>

-- 

Hervé Hénoch
Responsable informatique
Institut Sainte Catherine
250 chemin de Baigne-Pieds
CS 80005 --- 84918 AVIGNON cedex 9
Téléphone : 04.90.27.57.44


More information about the samba mailing list