[Samba] Solaris 11.1 Samba 3.6.6 oddity: wbinfo is good, but getent is not.
jake.carroll at uq.edu.au
Fri Jan 11 18:00:05 MST 2013
I've been searching various archives and lists to see if I can track down what I'm doing wrong – but I suspect something is getting in my way (bug perhaps)? I thought I'd ask on the list to see if others have any experience here.
Situation is as follows:
1. Solaris 11.1 box, successfully bound to active directory domain using traditional net join ads syntax.
2. Can kinit just fine. I have a krb5.conf and krb5.keytab in place in /etc/krb5/
3. Can wbinfo –u and wbinfo –g just fine to list all the groups in the organisation and in the users, too.
4. I configured my /etc/nsswitch.conf to look like so:
passwd: files winbind
group: files winbind
I am guessing my winbind is kind of working, on the basis that wbinfo is querying correctly and returns values from –u and –g.
My very thin smb.conf looks like this:
wins server = some.fqdn.goes.here, some.fqdn.goes.here
security = ADS
workgroup = SOMEWORKGROUP
realm = SOME.BIG.PLACE
machine password timeout = 0
server string = FILESERVER_TEST
log file = /var/samba/log/log.%m
log level = 1
debug pid = true
dns proxy = no
domain master = no
local master = no
preferred master = no
strict locking = no
# All the weird ID mapping strategy bits
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
template homedir = /expor/home/%U
template shell = /bin/bash
idmap config * : default = yes
idmap config * : backend = tdb
idmap config * : range = 1000000-1999999
idmap cache time = 604800
NB: These are default Solaris 11.1 support packages. Samba version is 3.6.6
Root at sol11-ads:/var/samba/log# smbd -V
It is compiled with all the "right" modules to the best of my understanding.
root at sol11-ads:/var/samba/log# smbd -b | grep -i win/ads/ldap
pdb_ldap pdb_smbpasswd pdb_tdbsam pdb_wbc_sam idmap_tdb idmap_passdb idmap_nss nss_info_template auth_sam auth_unix auth_winbind auth_wbc auth_server auth_domain auth_builtin vfs_default vfs_solarisacl
So, no matter what I do, I just can't convince getent to return anything other than local groups and users. It hangs for quite a while waiting to complete, but never finds anything outside of local users and groups. I had some heart, because wbinfo was working so well, and I'd actually managed to get Solaris 11.1 to join to a domain at all – but it seems I've come unstuck. My apologies in advance for what is probably an easily remedied issue and a silly question. I'm only just getting back into Samba after not having to touch it for a bout 5 years. I just get the feeling something else might be wrong (as in, a functional issue with 3.6.6, perhaps?).
Thank you for your time and assistance.
More information about the samba