Barry Hunter Priest
2003-Apr-22 02:40 UTC
[Samba] winbind working TOO well! (entire ADS tree returned just local domain)
version: samba 2.2.8a linux and solaris 8 I am but a leaf administrator in a huge AD tree. we are using a win2k ADS for authentication in my local domain. I JUST noticed that when running wbinfo -u and -g I am getting back the list for the ENTIRE ADS tree not just my domain. I could have sworn that before (pre 2.2.7a) it was just the local domain. I am aware of the 'winbind enum' but the man pages say some unix programs might start acting flaky if used. Is there some way to limit winbind to just my local domain and not the entire ADS tree?? or is the 'winbind enum users/groups'=no my only way to go to speed things up? Thanks Barry