[Samba] Samba 4.1.4 nsswitch/winbind issues

[steve]

On Sat, 2014-02-15 at 14:46 -0400, Doug Meredith wrote:
> Thanks, Steve.  Here is the smb.com:
> 
> [global]
> 
>    workgroup = DSTRC
>    security = ADS
>    realm = DSTRC.ORG
>    encrypt passwords = yes
> 
>    idmap config *:backend = tdb
>    idmap config *:range = 70001-80000
>    idmap config DSTRC:backend = ad
>    idmap config DSTRC:schema_mode = rfc2307
>    idmap config DSTRC:range = 500-40000
> 
>    winbind nss info = rfc2307
>    winbind trusted domains only = no
>    winbind use default domain = yes
>    winbind enum users  = yes
>    winbind enum groups = yes
> 
>    vfs objects = acl_xattr
>    map acl inherit = Yes
>    store dos attributes = Yes
> 
>   printcap name = /dev/null
>   load printers = no
>   disable spoolss = yes
>    printing = bsd

Hi
OK.
getent group does not work, so that's expected.

- cat /etc/krb5.conf
- Is the machine joined to the domain?
- what does klist -ke /etc/krb5.keytab look like?
- cat /etc/nsswitch.conf
- is winbindd running, not crashed (ps it)?
This is all the help I am allowed to offer on list.
Steve