[Samba] getent group not working on new domain member

[Rowland Penny]

On Sun, 09 Jul 2017 10:53:58 -0300
Guido Lorenzutti via samba <samba at lists.samba.org> wrote:

>   
> 
> The only thing that works for me was this: 
> 
> root at samba:~# getent
> passwd|tail
> systemd-resolve:x:102:104:systemd
> Resolver,,,:/run/systemd/resolve:/bin/false
> systemd-bus-proxy:x:103:105:systemd
> Bus
> Proxy,,,:/run/systemd:/bin/false
> _apt:x:104:65534::/nonexistent:/bin/false
> sshd:x:105:65534::/run/sshd:/usr/sbin/nologin
> ntp:x:106:110::/home/ntp:/bin/false
> messagebus:x:107:111::/var/run/dbus:/bin/false
> 
> SAMDOMadministrator:*:0:100::/home/administrator:/bin/false
> SAMDOMglorenzutti:*:3000020:100::/home/glorenzutti:/bin/false
> SAMDOMkrbtgt:*:3000021:100::/home/krbtgt:/bin/false
> SAMDOMguest:*:3000011:100::/home/guest:/bin/false
> 
> root at samba:~#
> grep enum /etc/samba/*
> /etc/samba/smb.conf:winbind enum users =
> yes
> /etc/samba/smb.conf:winbind enum groups = yes
> 

The 'winbind enum' lines are only required if you want getent to
show all the users and groups, you do not NEED to do this

There is no need for the lines and they will slow things down if you
have a lot of users (imagine if you have a 10,000 users, how long will
that take to print to screen ?). If 'getent passwd username' works, this
is sufficient to prove getent works.

Rowland