[Samba] Samba 4.1.4 nsswitch/winbind issues

[Rowland Penny]

On 16/02/14 12:39, steve wrote:
> On Sun, 2014-02-16 at 12:24 +0000, Rowland Penny wrote:
>> On 15/02/14 18:46, Doug Meredith wrote:
>>> Thanks, Steve.  Here is the smb.com:
>>>
>>> [global]
>>>
>>>      workgroup = DSTRC
>>>      security = ADS
>>>      realm = DSTRC.ORG
>>>      encrypt passwords = yes
>>>
>>>      idmap config *:backend = tdb
>>>      idmap config *:range = 70001-80000
>>>      idmap config DSTRC:backend = ad
>>>      idmap config DSTRC:schema_mode = rfc2307
>>>      idmap config DSTRC:range = 500-40000
>>>
>>>      winbind nss info = rfc2307
>>>      winbind trusted domains only = no
>>>      winbind use default domain = yes
>>>      winbind enum users  = yes
>>>      winbind enum groups = yes
>>>
>>>      vfs objects = acl_xattr
>>>      map acl inherit = Yes
>>>      store dos attributes = Yes
>>>
>>>     printcap name = /dev/null
>>>     load printers = no
>>>     disable spoolss = yes
>>>      printing = bsd
>>>
>>>
>>>
>>> On Sat, Feb 15, 2014 at 1:39 PM, steve <steve at steve-ss.com> wrote:
>>>
>>>> On Sat, 2014-02-15 at 11:42 -0400, Doug Meredith wrote:
>>>>>    The member server I am
>>>>> testing from was fully patched as of this morning.
>>>>>    Any help would be appreciated.
>>>> I'm afraid that without smb.conf on your member server we've no chance.
>>>> Cheers,
>>>> Steve
>>>>
>>>>
>>>> --
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>
>>>
>> Do the users have uidNumber's & gidNumber's?
> The OP reports for user doug: wbinfo gives 20001 but that both getent
> passwd and getent passwd doug draw a blank.
> Cheers,
> Steve
>
>
OK, then does 'Domain Users' have a gidNumber and do his users have this 
gidNumber?
I think that without a valid gidNumber in the users AD, then getent will 
not display users.

Rowland