samba - Oct 2016 - getent group [groupname] do not show users

Hi all,

With Samba 4.4.5, on member servers (I did not tried yet on DCs), using
"getent group" with or without specifying a group name groups are
shown but
they are shown as empty groups, no user name is displayed.

Is there a way to make them displayed?

Cheers,

Mathias

I just tested on some DC running also 4.4.5 and "getent group
my_group"
does not show groups content.

I read here
http://serverfault.com/questions/625416/samba-4-group-members-not-shown-in-getent-group
a proposal to use samba-tool as a replacement but samba-tool is not
available on member servers which make that workaround not usable in most
cases...

2016-10-05 11:40 GMT+02:00 mathias dufresne <infractory at gmail.com>:
> Hi all,
>
> With Samba 4.4.5, on member servers (I did not tried yet on DCs), using
> "getent group" with or without specifying a group name groups are
shown but
> they are shown as empty groups, no user name is displayed.
>
> Is there a way to make them displayed?
>
> Cheers,
>
> Mathias
>

On Wed, 5 Oct 2016 12:04:53 +0200
mathias dufresne via samba <samba at lists.samba.org> wrote:
> I just tested on some DC running also 4.4.5 and "getent group
> my_group" does not show groups content.
> 
> I read here
>
http://serverfault.com/questions/625416/samba-4-group-members-not-shown-in-getent-group
> a proposal to use samba-tool as a replacement but samba-tool is not
> available on member servers which make that workaround not usable in
> most cases...
> 
> 2016-10-05 11:40 GMT+02:00 mathias dufresne <infractory at
gmail.com>:
> 
> > Hi all,
> >
> > With Samba 4.4.5, on member servers (I did not tried yet on DCs),
> > using "getent group" with or without specifying a group name
groups
> > are shown but they are shown as empty groups, no user name is
> > displayed.
> >
> > Is there a way to make them displayed?
> >
> > Cheers,
> >
> > Mathias
> >
It has never worked on DC, but I use 4.4.4 on a domain member and if I
run 'getent group Domain\ Users' , I get all my users. 

You can use samba-tool on a domain member, you just need to point it at
a DC:

samba-tool group listmembers Domain\ Users -H ldap://dc1 -UAdministrator

Rowland