[Samba] getent doesn't works
rpenny at samba.org
Wed Nov 25 10:15:45 UTC 2020
On 25/11/2020 09:36, Piviul via samba wrote:
> Hi all, a PC was correctly joined to a domain but offline logon wasn't
> working so then I have tried to get authentication and nss using SSSD
> but I fail to correctly configure the logon. Then I read a message on
> this list that says SSSD doesn't works on samba >= 4.8. Samba
> installed is the 4.12 so I have followed this guide[¹] to reconfigure
> again the PC using winbind instead of SSSD. All seems to works until
> 8,2 Using Domain Accounts and Groups in Operating System. In other
> words winbind can find users and groups but getent doesn't shows user
> or group information. For example getent group "DOMINIOCSA\\Domain
> Users" show nothing.
> Someone can help me to find a way to have getent query correctly AD
> remote users and groups?
> I forgot to say that the PC is a debian bullseye.
You are using the winbind 'ad' backend, so have you given your users a
uidNumber attribute containing a unique number inside the '10000-999999'
range AND given them a gidNumber containing a valid group gidNumber ?
Failing the latter, does Domain Users have a gidNumber attribute ?
More information about the samba