[Samba] getent group empty response

[Rowland Penny]

On 18/09/14 08:53, Daniel Müller wrote:
> With, security = ads
> It should point to an ADS-Server(Windows??)

that was what I thought, but not enough info given to be sure.

Rowland

>
>
>
> EDV Daniel Müller
>
> Leitung EDV
> Tropenklinik Paul-Lechler-Krankenhaus
> Paul-Lechler-Str. 24
> 72076 Tübingen
> Tel.: 07071/206-463, Fax: 07071/206-499
> eMail: mueller at tropenklinik.de
> Internet: www.tropenklinik.de
>
>
>
>
>
> -----Ursprüngliche Nachricht-----
> Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im
> Auftrag von Rowland Penny
> Gesendet: Donnerstag, 18. September 2014 09:45
> An: samba at lists.samba.org
> Betreff: Re: [Samba] getent group empty response
>
> On 18/09/14 07:56, Deniz Eren wrote:
>> We have two domain controllers, one parent(DOMAIN.COM
>> <http://domain.com/>) and one child(CHILD.DOMAIN.COM
>> <http://child.domain.com/>). When two domain controllers are up
>> "getent group" returns group names correctly. But when child domain
>> controller is down "getent group" returns empty. My samba version is
>> "3.6.22". I have added my smb.conf I couldn't find any parameters
>> affecting this problem. Am I missing something in smb.conf? Or is there a
> workaround to solve this problem?
>>
>> smb.conf
>> -------------------------------
>> [global]
>>      netbios name = BUILD2
>>      realm = DOMAIN.COM <http://domain.com/>
>>      workgroup = DOMAIN
>>      security = ads
>>      encrypt passwords = yes
>>      password server = 10.0.0.59
>>      log level = 1
>>      log file = /var/log/samba.log
>>      ldap ssl = no
>>      idmap uid = 10000-20000
>>      idmap gid = 10000-20000
>>
>>      winbind separator = /
>>      winbind enum users = yes
>>      winbind enum groups = yes
>>      winbind use default domain = yes
>>
>>      domain master = no
>>      local master = no
>>      preferred master = no
>>
>>      template shell = /sbin/nologin
>>
>>      getwd cache = yes
>>      winbind cache time = 3000
>>      ldap connection timeout = 10
>>      ldap timeout = 120
>> -------------------------------
>>
>> This issue is like mine "
>> https://lists.samba.org/archive/samba/2010-June/156813.html".
> Hi, the smb.conf you have posted seems to be for a client, Just what is it
> pointed at, an NT4 style PDC, a Samba4 AD DC or what? I think that you are
> going to have to give us a bit more info.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>