[Samba] getent group empty response

Deniz Eren denizlist at denizeren.net
Thu Sep 18 00:56:05 MDT 2014

We have two domain controllers, one parent(DOMAIN.COM <http://domain.com/>)
and one child(CHILD.DOMAIN.COM <http://child.domain.com/>). When two domain
controllers are up "getent group" returns group names correctly. But when
child domain controller is down "getent group" returns empty. My samba
version is "3.6.22". I have added my smb.conf I couldn't find any
parameters affecting this problem. Am I missing something in smb.conf? Or
is there a workaround to solve this problem?

   netbios name = BUILD2
   realm = DOMAIN.COM <http://domain.com/>
   workgroup = DOMAIN
   security = ads
   encrypt passwords = yes
   password server =
   log level = 1
   log file = /var/log/samba.log
   ldap ssl = no
   idmap uid = 10000-20000
   idmap gid = 10000-20000

   winbind separator = /
   winbind enum users = yes
   winbind enum groups = yes
   winbind use default domain = yes

   domain master = no
   local master = no
   preferred master = no

   template shell = /sbin/nologin

   getwd cache = yes
   winbind cache time = 3000
   ldap connection timeout = 10
   ldap timeout = 120

This issue is like mine "

More information about the samba mailing list