[Samba] Offline logon and NSS...

[Rowland penny]

On 17/10/2019 15:00, Marco Gaiarin via samba wrote:
> Mandi! Rowland penny via samba
>    In chel di` si favelave...
>
>> Don't think that will work, unless you never turn the computer off or
>> restart Samba.
>> The problem isn't how often the cache gets updated, it is 'does the cache
>> exist'
> Ahem, sorry, no... i was not speaking 'now', but 'when bug 14074 get
> fixed'.
>
>
> So, supposing the bug that delete the cache on reboot get fixed, i have
> to set very high the cache retention period to be effective, right?
> Or in absence of every DC reachable, cache by default does not expire?
>
> Thanks.
>
No, if you have 'winbind offline logon = yes' set that is it as far as 
Samba is concerned, you also have to set up PAM to use cached logins.

Winbind caches the users passwd etc, but renews it if the cache time has 
been exceeded unless an AD DC cannot be contacted i.e. they are all offline.

Rowland