[Samba] No domaingroups with getent group

L.P.H. van Belle belle at bazuin.nl
Wed Oct 29 06:50:28 MDT 2014

 But when I execute "getent group" I see only the local users in the output.  ...

Nothing is wrong in above, we already explained. 
This is by design. 


>-----Oorspronkelijk bericht-----
>Van: micromegas at mail333.com 
>[mailto:samba-bounces at lists.samba.org] Namens ?icro MEGAS
>Verzonden: woensdag 29 oktober 2014 12:53
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] No domaingroups with getent group
>Hello Stefan,
>> But "getent group" is not showing any domaingroup. In smb.conf I have
>> "winbind enum group = yes" and "winbind enum users = Yes" set.
>I have exactly the same behaviour on my two member servers, so you're
>not alone. I also already asked here on the list, but unfortunately
>noone could give me a reasonable answer to that. To summarize it:
>The /etc/nsswitch.conf looks like that:
>passwd:         compat winbind
>group:          compat winbind
>My domain users all have a uid assigned in the [UNIX 
>Attribute] tab of ADUC. The domain group "Domain Users" and 
>"Domain Admins" also have assigned a gid in the [UNIX Attribute] tab.
>"wbinfo -u"
>"wbinfo -g"
>"id johndoe"
>"getent passwd"
>all are showing correct results as expected. But when I 
>execute "getent group" I see only the local users in the 
>output. On the other side, when I do "getent group 10000" or 
>"getent group 'Domain Users'" I get the correct result displayed:
>domain users:x:10000:
>So as conclusion, "getent group" is not outputting the whole 
>groups, but if you tell "getent group ..." to query a certain 
>gid or group name it works. I have no clue what's going on here.
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list