* Eric Knudstrup <eric@knudstrup.org> [070307
20:16]:> Now I'm trying to make it so the Samba accounts can be used for user
> logins as well. Unfortunately I'm having a bit of trouble with
winbind.
> Whenever I try to do a "getent passwd eknuds", it find the entry
in the
> ldap sam, but the winbind log for my domain comes up with this and the
> getent displays nothing:
what did you set for the 'idmap backend' parameter in your smb.conf
file?
What does
wbinfo -u
produce? It should list every username known to your ldap backend.
what do these produce:
wbinfo -n eknuds
wbinfo -s S-1-5-21-3868333197-704855571-3977030669-3012
On rare occasion, I have a similar problem, and typically, if I stop winbind,
delete the local /var/lib/samba/winbindd_idmap.tdb and restart winbind,
the problem is solved. I'm running v3.0.22.
- Jon
> [2007/03/07 15:48:46, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541)
> init_sam_from_ldap: Entry found for user: eknuds
> [2007/03/07 15:48:46, 0] passdb/pdb_get_set.c:pdb_get_group_sid(164)
> pdb_get_group_sid: Failed to find Unix account for eknuds
> [2007/03/07 15:48:46, 1]
> nsswitch/winbindd_user.c:winbindd_dual_userinfo(151)
> error getting user info for sid
> S-1-5-21-3868333197-704855571-3977030669-3012
>
> I have my nsswitch.conf set to:
> passwd: files winbind
> shadow: files winbind
> group: files winbind
>
> #passwd: compat
> #group: compat
>
> hosts: files wins dns
> networks: files dns
>
> services: files ldap
> protocols: files
> rpc: files
> ethers: files
> netmasks: files
> netgroup: files ldap
> publickey: files
>
> bootparams: files
> automount: files nis
> aliases: files ldap
> passwd_compat: winbind
> group_compat: winbind
>
> Do I need to bite the bullet and add accounts to the local Unix passwd
> file?
>
> Thanks,
>
> Eric
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
--
Happy Landings,
Jon Detert
IT Systems Administrator, Milwaukee School of Engineering
1025 N. Broadway, Milwaukee, Wisconsin 53202, U.S.A.