[Samba] samba 4.0.6 getent group

[smb l. ist]

On Tue, 2013-06-25 at 14:57 -0700, smb l. ist wrote:
> On Mon, 2013-06-24 at 11:48 -0700, smb l. ist wrote:
> > Hello all listies.
> > 
> > I've got samba4.0.6 running on FreeBSD 9.1.
> > 
> > Joined W2K12 domain as member server.
> > 
> > running getent group I noticed it takes a long time to resolve groups.
> > 
> > The result is correct, but it is inordinately long.
> > 
> > With 3.6.13 on FreeBSD 9.1 the return is nearly instantaneous.
> 
> Hi
> Do you ever need to list _all_ the groups? If not then set:
>  winbind enum groups = No
> and then query the groups singly:
> getent group name.of.group
> 
> Also, you could cache them. I'm not sure but nscd may work with winbind.
> hth
> Steve
> 
> Yes, in fact the tool I'm  writing NEEDS all groups from AD, so, that's not going to work. And as the script doesn't know the groups ahead of time.....
> 
> It's weird, I'll grab a winbind -i d 10 file when I get a minute. Something is looping around during the group call...
> 
> Thanks for your time.
> 
> T3

Hi
I don't think winbind will return all the groups:
https://lists.samba.org/archive/samba/2012-August/168659.html
i.e. it only works with:
getent group single-group

If you want it to just work, now, today, you could use nslcd or sssd
instead of winbind, than you'd not need to change your scripts.
HTH

Well, winbind works fine for listing groups. I would rather not have to use nlscd or other ldap tools. As to sssd this is FreeBSD 9.1. The issue is just the sluggish response.

T3

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba