[Samba] getent problems with new Samba version

[Rowland Penny]

On Thu, 26 Jan 2017 16:26:02 -0500
Mark Foley via samba <samba at lists.samba.org> wrote:

> On Thu, 26 Jan 2017 19:36:33 +0000 Rowland Penny wrote:
> 
> > On Thu, 26 Jan 2017 14:09:49 -0500
> > Mark Foley via samba <samba at lists.samba.org> wrote:
> >
> > > On Thu, 26 Jan 2017 09:56:10 +0000 Rowland Penny wrote:
> > > >
> > > > On Thu, 26 Jan 2017 02:35:43 -0500
> > > > Mark Foley via samba <samba at lists.samba.org> wrote:
> > > 
> > > I can't imagine why they would change the location of a crucial
> > > directory like this!!!
> >
> > It does seem strange, normally a distro will select where to put a
> > package contents and then sticks to it.
> 
> > > > If you read the slackware file 'doinst.sh', there is this:
> 
> > > Where is this file? I have no doinst.sh on my entire system, nor
> > > do I find it on the Slackware 14.2 installation DVD.
> >
> > Ah, it might be called doinst.sh.gz on your DVD, but I found it
> > here:
> >
> > http://mirrors.slackware.com/slackware/slackware64-14.2/patches/source/samba/
> 
> Nope, nothing like that on my DVD, which I downloaded from
> LinuxQuestions.org. Perhaps there is a new DVD, or maybe that info is
> just on the Slackware website. Rather an obscure communication of
> something that can grind your system to a halt. Very unlike Slackware.
> 
> > > > Have you tried checking in AD with ldbsearch or ldbedit for the
> > > > actual records ?
> > > 
> > > Yes, I've done `ldbedit -H /var/lib/samba/private/sam.ldb` (and
> > > ldbsearch) and among other settings for user 'mark' I have:
> > > 
> > > uidNumber: 10001
> > > gidNumber: 10000
> >
> > Does 'Domain Users' have a gidNumber ?
> 
> Yes, here is the entire section on that from ldbsearch. You can see
> the gidNumber is 10000:
> 
> # record 138
> dn: CN=Domain Users,CN=Users,DC=hprs,DC=local
> objectClass: top
> objectClass: group
> cn: Domain Users
> description: All domain users
> instanceType: 4
> whenCreated: 20140903044615.0Z
> uSNCreated: 3541
> name: Domain Users
> objectGUID: edb886f3-5829-4b36-805f-3cce7f737d02
> objectSid: S-1-5-21-1052267278-1962196458-4119365663-513
> sAMAccountName: Domain Users
> sAMAccountType: 268435456
> groupType: -2147483646
> objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=hprs,DC=local
> isCriticalSystemObject: TRUE
> memberOf: CN=Users,CN=Builtin,DC=hprs,DC=local
> msSFU30NisDomain: hprs
> gidNumber: 10000
> msSFU30Name: Domain Users
> whenChanged: 20151012022826.0Z
> uSNChanged: 6863
> distinguishedName: CN=Domain Users,CN=Users,DC=hprs,DC=local
> 
> The question remains, why is winbind not getting this info from
> sam.ldb? Everything appears to be in the right place.
> 
> Can I turn on some debugging for winbind? Where is it started?
> 
> --Mark
> 

add 'log level 3 winbind:10' to smb.conf

Rowland