[Samba] samba 4.0.6 getent group

steve steve at steve-ss.com
Wed Jun 26 02:30:19 MDT 2013


On Tue, 2013-06-25 at 14:57 -0700, smb l. ist wrote:
> On Mon, 2013-06-24 at 11:48 -0700, smb l. ist wrote:
> > Hello all listies.
> > 
> > I've got samba4.0.6 running on FreeBSD 9.1.
> > 
> > Joined W2K12 domain as member server.
> > 
> > running getent group I noticed it takes a long time to resolve groups.
> > 
> > The result is correct, but it is inordinately long.
> > 
> > With 3.6.13 on FreeBSD 9.1 the return is nearly instantaneous.
> 
> Hi
> Do you ever need to list _all_ the groups? If not then set:
>  winbind enum groups = No
> and then query the groups singly:
> getent group name.of.group
> 
> Also, you could cache them. I'm not sure but nscd may work with winbind.
> hth
> Steve
> 
> Yes, in fact the tool I'm  writing NEEDS all groups from AD, so, that's not going to work. And as the script doesn't know the groups ahead of time.....
> 
> It's weird, I'll grab a winbind -i d 10 file when I get a minute. Something is looping around during the group call...
> 
> Thanks for your time.
> 
> T3

Hi
I don't think winbind will return all the groups:
https://lists.samba.org/archive/samba/2012-August/168659.html
i.e. it only works with:
getent group single-group

If you want it to just work, now, today, you could use nslcd or sssd
instead of winbind, than you'd not need to change your scripts.
HTH





More information about the samba mailing list