Wild, Phil
2003-Sep-25 04:34 UTC
[Samba] samba 2.2.8a problem with winbind and getent group
Hi samba mailing list. I am having a major problem with winbind. This is my first implementation and I have exhausted samba documentation, google and newsgroup searches. Please help if you can. I am running samba 2.2.8a under Solaris 8 SPARC. Source was compiled using gcc with winbind pam builtin-popot and challenge options. I am only using samba for the winbind portion at this time. various smb.conf settings workgroup = SEALCORP server string = peruxbu1 security = domain wins server = 125.1.18.12 dns proxy = no password server = pernt2 pernt1 pernt5 encrypt passwords = yes winbind uid = 10000-20000 winbind gid = 10000-20000 template homedir = /export/home/%D/%U template shell = /usr/bin/bash winbind separator = + winbind enum groups = no winbind enum groups = no winbind cache time = 15 winbind use default domain = yes name resolve order = hosts lmhosts wins bcast winbind seems to be running correctly wbinfo -t Secret is good Under NT, all users have a primary group of "Domain Users" If I run getent passwd I see what appears to be all the users. A sample appears below YeoT:x:10925:10000:Trent Yeo:/export/home/SEALCORP/yeot:/usr/bin/bash YongA:x:10926:10000:Amy Yong:/export/home/SEALCORP/yonga:/usr/bin/bash YorgT:x:10927:10000:Tony Yorg:/export/home/SEALCORP/yorgt:/usr/bin/bash YorkR:x:10928:10000:Rowena York:/export/home/SEALCORP/yorkr:/usr/bin/bash YoungerN:x:10929:10000:Neil Younger:/export/home/SEALCORP/youngern:/usr/bin/bash A getent group takes forever to return A getent group | grep Domain returns the following: Domain Admins:x:10206:<removed admin account names from email> Domain Guests:x:10207:Guest A wbinfo -g | grep Domain returns the following: Domain Admins Domain Guests Domain Users Anyone know why I would be losing the last group when using getent? Also, why would a getent group take forever to return (like a minute). Time wbinfo -g | wc -l Returns a count of 456 lines and takes .068ms to return Time getent group | wc -l Returns a count of 229 lines and takes 1m34.501s to return I am running winbindd with -I -d4 to see debug information for the above and all I get from the last command is: [ 1101]: getpwnam yeot [ 1605]: setgrent [ 1605]: getgrent [ 1605]: endgrent Cheers Phil -- Phil Wild Sealcorp Holdings Ltd Tel: 08 9415 5595 Mob: 0400 466 952 Email: phil.wild@sealcorp.com.au =============================================================================================== IMPORTANT INFORMATION This message and any files transmitted with it are confidential and should be read only by those persons to whom it is addressed. If you have received this message in error, please notify us immediately by way of reply. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. It is the duty of the recipient to virus scan and otherwise test the information provided before loading onto any computer system. SEALCORP does not warrant that the information is free of a virus or any other defect or error. SEALCORP is not liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of SEALCORP. ================================================================================================