[Samba] classicupgrade

[Rowland Penny]

On Mon, 29 Oct 2018 09:41:40 +0100
Corrado Ravinetto via samba <samba at lists.samba.org> wrote:

> Hello Rowland
> 
> Il 26/10/2018 18:03, Rowland Penny via samba ha scritto:
> > what does 'getent passwd ausername' show ?
> nothing :-(

is this on a DC or a Unix domain member ?
If you are compiling Samba yourself, have you created the
libnss_winbind links ?
See here:

https://wiki.samba.org/index.php/Libnss_winbind_Links

Have you set up PAM ?
See here:

https://wiki.samba.org/index.php/Authenticating_Domain_Users_Using_PAM

> 
> [root at srvcerruti ~]# getent passwd administrator

This should only return anything on a DC or a Unix domain member using
the winbind 'rid' backend, but you shouldn't use Administrator directly
on a Unix machine.

> [root at srvcerruti ~]# wbinfo --group-info='Domain users'
> domain users:x:513:

For you this is correct.

> What does 'getent group Domain\ Users' show ?
> nothing anymore

Probably/possibly connected with lack of links and PAM

> > What worries me is the group with the ID 502, which group is it ?
> [root at srvcerruti ~]# wbinfo --gid-info 502
> g_cerruti:x:502:
> 
> g_cerruti is mapping of domain users

Then un-map it, You do not use group mappings in AD.

Rowland