[Samba] winbind and getent group

[Gary Casterline]

winbind expand groups = 1

should do it.   I had to set it back to 0 though after finding how much it
slowed things down.

 _Gary

On Fri, Oct 20, 2017 at 7:53 AM, Andreas Hauffe via samba <
samba at lists.samba.org> wrote:

> Hi,
>
> I'm having trouble to let "getent group" show the members of the group.
> The command is just listing the group name and gid but no members. So does
> "wbinfo --group-info". Is there some trick to do? "getent passwd" shows
> correct group memberships.
>
>
> smb.conf
>
> [global]
>
>     netbios name = hostname
>     security = ADS
>     workgroup = D1
>     realm = D1.D2.EXAMPLE.DOM
>     dedicated keytab file = /etc/krb5.keytab
>     kerberos method = secrets and keytab
>
>     template homedir = /home/%U
>     template shell = /bin/bash
>
>     winbind use default domain = yes
>     winbind enum users  = yes
>     winbind enum groups = yes
>     winbind refresh tickets = yes
>
>     idmap config * : backend = tdb
>     idmap config * : range = 3000-9999
>     idmap config D1 : backend = rid
>     idmap config D1 : range = 1000000-2000000
>     idmap config D2 : backend = rid
>     idmap config D2 : range = 3000000-4000000
>
> nsswitch.conf
>
> passwd: compat winbind
> group:  compat winbind
>
> hosts:          files mdns_minimal [NOTFOUND=return] dns
> networks:       files dns
>
> services:       files
> protocols:      files
> rpc:            files
> ethers:         files
> netmasks:       files
> netgroup:       files nis
> publickey:      files
>
> bootparams:     files
> automount:      files nis
> aliases:        files
>
> --
> Regards Andreas
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>