[Samba] idmap ad question

[Rowland Penny]

On 13/02/2023 19:42, Vaughan, Robert J via samba wrote:

> Yeah the link is correctly setup, since it is not compiled Samba
> 
> Ok, I found in this link ..
> 
> https://wiki.samba.org/index.php/Troubleshooting_Samba_Domain_Members#getent_not_Finding_Domain_Users_and_Groups
> 
> I had to change these lines to 'Yes' ..
> 
>          winbind enum groups = Yes
>          winbind enum users = Yes
> 
> Now, it works, but it's really slow (and I think I have heard you saying not to enable this before)

Ah, I think light dawns

Were you running 'getent passwd' rather than 'getent passwd AUSERNAME' ?

To get all the users shown, you need 'winbind enum users = yes', but it 
isn't required and, as you have found out, it just slows things down.

Rowland