[Samba] getent passwd SAMDOM\\demo01 does not work

[Rowland Penny]

On Tue, 2021-10-26 at 07:31 -0500, K. R. Foley wrote:
> On 10/26/21 7:09 AM, Rowland Penny via samba wrote:
> > On Tue, 2021-10-26 at 06:54 -0500, K. R. Foley wrote:
> > > On 10/26/21 2:28 AM, Rowland Penny via samba wrote:
> > > > On Mon, 2021-10-25 at 20:19 -0500, K. R. Foley wrote:
> > > > > On 10/25/21 3:18 AM, Rowland Penny via samba wrote:
> > > > > > On Sun, 2021-10-24 at 18:21 -0500, K. R. Foley wrote:
> > > > > > > I am just getting back to troubleshooting this.
> > > > > > > 
> > > > > > > I do not think that sssd is enabled. In fact I do not
> > > > > > > think
> > > > > > > it is
> > > > > > > even
> > > > > > > installed on this system.
> > > > > > OK, I have lost track of this, but it looks like you are
> > > > > > running
> > > > > > Samba
> > > > > > as an AD DC. Have you checked that sssd isn't installed ?
> > > > > Yes. sssd is not installed.
> > > > > 
> > > > > "rpm -qa | grep sss" returns nothing.
> > > > > 
> > > > > > If it is, remove it along with all the 'sss' in
> > > > > > /etc/nsswitch.conf
> > > > > Commented all references in nsswitch.conf
> > > > > 
> > > > > > Have you created the libnss-winbind links ? either manually
> > > > > > (see
> > > > > > here:
> > > > > > https://wiki.samba.org/index.php/Configuring_Winbindd_on_a_Samba_AD_DC
> > > > > I followed those instructions.
> > > > > 
> > > > > [root at cln-files-prod kr]# ls -lt /lib64/libnss_winbind.so.2
> > > > > 
> > > > > lrwxrwxrwx 1 root root 40 Oct 11 21:21
> > > > > /lib64/libnss_winbind.so.2
> > > > > ->
> > > > > /usr/local/samba/lib/libnss_winbind.so.2
> > > > > [root at cln-files-prod kr]# ls -lt /lib64/libnss_winbind.so
> > > > > lrwxrwxrwx 1 root root 26 Oct 11 21:21
> > > > > /lib64/libnss_winbind.so
> > > > > ->
> > > > > /lib64/libnss_winbind.so.2
> > > > This is on fedora if I remember correctly, so have you
> > > > installed
> > > > these
> > > > packages:
> > > > 
> > > > samba samba-winbind samba-winbind-clients oddjob-mkhomedir
> > > > 
> > > > Rowland
> > > > 
> > > Actually it is
> > > 
> > > CentOS 7
> > > 
> > > Samba 4.11.13 built from source  on AD and member server
> > > 
> > > Does the Samba build on the client include everything needed or
> > > do I
> > > still need to add some package?
> > Yes, If you built Samba by './configure && make && make install'
> > follow
> > the wiki, as everything should be in /usr/local/samba.
> 
> I built it using the commands above following the wiki to build from
> source.
> 
> - built from source
> 
> - AD was migrated from Samba NT4 Domain
> 
> - DNS is Bind9 external DNS server
> 
> - everything seems to work on the AD
> 
> - DNS works from linux Samba member server
> 
> - linux Samba member setup following wiki here 
> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member
> 
> - joined using "# net ads join -U administrator"
> 
> - wbinfo seems to work fine
> 
> [root at cln-files-prod kr]# wbinfo --ping-dc
> checking the NETLOGON for domain[LOCAL] dc connection to 
> "ss-prod.local.SAMDOM.com" succeeded
> 
> - wbinfo -g lists the domain groups
> 
> - wbinfo -u lists the  domain users
> 
> - getint passwd tech - tech is a domain user that is not a local
> user. 
> This returns nothing on the domain member. Returns expected result on
> the AD
> 
> - getint passwd local\\tech - also does not return anything on the 
> member server, but works fine on the AD
> 
> kr

Please post the output of 'testparm -s' run on the Unix domain member

Rowland