[Samba] getent group empty response

Deniz Eren denizlist at denizeren.net
Thu Sep 18 00:07:46 MDT 2014

We have two domain controllers, one parent(DOMAIN.COM) and one child(
CHILD.DOMAIN.COM). When two domain controllers are up "getent group"
returns group names correctly. But when child domain controller is down
"getent group" returns empty. My samba version is "3.6.22". I have added my
smb.conf I couldn't find any parameters affecting this problem. Am I
missing something in smb.conf? Or is there a workaround to solve this

   netbios name = BUILD2
   realm = DOMAIN.COM
   workgroup = DOMAIN
   security = ads
   encrypt passwords = yes
   password server =
   log level = 1
   log file = /var/log/samba.log
   ldap ssl = no
   idmap uid = 10000-20000
   idmap gid = 10000-20000

   winbind separator = /
   winbind enum users = yes
   winbind enum groups = yes
   winbind use default domain = yes

   domain master = no
   local master = no
   preferred master = no

   template shell = /sbin/nologin

   getwd cache = yes
   winbind cache time = 3000
   ldap connection timeout = 10
   ldap timeout = 120

This issue is like mine "

More information about the samba mailing list