[Samba] Getent doesn't show AD users/groups

L.P.H. van Belle belle at bazuin.nl
Tue Dec 15 14:36:58 UTC 2020

What Rowland said...

I alway im get a support call here in the office when im typing this..
and then i can remove 80% of my reply ;-) but thanks for the replies Rowland
:-)  So in addition. 

search domain.tld # MUST be the primary dns domain you setup samba with. 
nameserver IP_OF_THIS_SERVER 

And not because that does not resolv to you hostname. 

FQDN: server1.example.com    server1.example.com
The others, or add behind the above line, or add it as CNAME in dns. 
Just use 1 line per ipadres and the first one is always the "real" hostname. 

beside that, most look ok, these changes should already fix it.. 
first fix it, then upgrade! 
and make sure smb.conf is trimmed down to minimal settings that helps while your upgrading. 



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland penny via
> samba
> Verzonden: dinsdag 15 december 2020 15:18
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Getent doesn't show AD users/groups
> On 15/12/2020 13:58, Alex Orlov via samba wrote:
> > This is the result of that script
> >
> Alex, first upgrade your distro, Debian 8 is extremely old, once
> upgraded to Debian 10, use the Samba packages from here:
> http://apt.van-belle.nl/
> Now explain this lot:
> DNS Domain: example.com
> FQDN: server1.example.com
>    server1.example.com
>    fileserver1.server1.example.com
>    server1.server1.example.com
> search server1.example.com
> default_realm = SERVER1.EXAMPLE.COM
> For a start, the DNS domain does not match the realm, but the realm does
> match the DC's FQDN
> Rowland
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list