[Samba] ODP: Re: samba 4 ad member - idmap = ad for machine accounts

[Rowland Penny]

On Tue, 19 Sep 2017 12:29:37 +0200
Marco Gaiarin via samba <samba at lists.samba.org> wrote:

> Mandi! k.wirski via samba
>   In chel di` si favelave...
> 
> > I'm not sure what You mean about invalidating cache?
> 
> 'nscd' is a generic Name Services Caching Daemon normally installed
> automatically alongside winbind.
> 
> In the past, when playing with winbind, i get confused by the cache,
> and confusion grow considering that:
> 
> 	getent passwd user
> 
> does not query the cache, so all seems to work byt winbind continue to
> get data from the cache, until expire (or you invalidate/restart
> nscd).
> 

There is only one problem with that, the nscd cache isn't really used
by winbind, in fact, you shouldn't use nscd with winbind.

Winbind has its own cache.

Rowland