samba - Jan 2004 - Can't get "getent passwd" to display winbind users

Hi,

I am running Samba 3.0.1 on a Debian/Sid machine. I have installed
winbind to access the AD of the local network, which I want to use for
UNIX logons.

wbinfo -u shows all the users of the AD, but "getent passwd" only
shows
the contents of the file /etc/passwd.

I have been following the instruction for winbind (Chapter 21) in the
Samba-HOWTO-Collection.

Any comments would be greatly appreciated.

Regards,
Rainer


Here's some data about my configuration.

PCA-ARNSTR:/lib# ls /lib/*winbind* -l
-rw-r--r--    1 root     root        15024 Dec 31 06:06
/lib/libnss_winbind.so.2


Here is my /etc/nsswitch.conf
--------------------------------------
# /etc/nsswitch.conf
passwd:         files winbind compat
group:          files winbind compat
shadow:         files compat
hosts:          files dns
networks:       files
protocols:      db files
services:       db files
ethers:         db files
rpc:            db files
netgroup:       nis

And my smb.conf:
# Sample configuration file for the Samba suite for Debian GNU/Linux.
[global]

## Browsing/Identification ###
   workgroup = NTDOM
   server string = %h server (Linux/Samba %v)
   netbios name = PCA-ARNSTR
   wins server = svr_gamma
   dns proxy = no

#### Debugging/Accounting ####
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d

####### Authentication #######
   security = ADS
   realm = "EE-CONSULTANTS.DE"
   encrypt passwords = yes
   passdb backend = tdbsam guest
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
   password server = svr_gamma.ee-consultants.de
   obey pam restrictions = no
#  guest account = nobody
   invalid users = root
   client use spnego = yes
   idmap uid = 10000-20000
   idmap gid = 10000-20000
   winbind enum users = yes
   winbind enum groups = yes
   template shell = /bin/bash
   winbind separator = +
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
   printing = cups
   printcap name = cups

   socket options = TCP_NODELAY

On Tue, 13 Jan 2004, Arnst, Rainer wrote:
> Hi,
>
> I am running Samba 3.0.1 on a Debian/Sid machine. I have installed
> winbind to access the AD of the local network, which I want to use for
> UNIX logons.
>
> wbinfo -u shows all the users of the AD, but "getent passwd" only
shows
> the contents of the file /etc/passwd.
>
> I have been following the instruction for winbind (Chapter 21) in the
> Samba-HOWTO-Collection.
>
> Any comments would be greatly appreciated.
You just triggered my memory!

You must make certain that there are no accounts in AD backend that have
the same name as you already have in /etc/passwd and that differ in UID.
If you have this winbind will do exactly what you have reported.

I hit this wall recently. :(

- John T.
>
> Regards,
> Rainer
>
>
> Here's some data about my configuration.
>
> PCA-ARNSTR:/lib# ls /lib/*winbind* -l
> -rw-r--r--    1 root     root        15024 Dec 31 06:06
> /lib/libnss_winbind.so.2
>
>
> Here is my /etc/nsswitch.conf
> --------------------------------------
> # /etc/nsswitch.conf
> passwd:         files winbind compat
> group:          files winbind compat
> shadow:         files compat
> hosts:          files dns
> networks:       files
> protocols:      db files
> services:       db files
> ethers:         db files
> rpc:            db files
> netgroup:       nis
>
> And my smb.conf:
> # Sample configuration file for the Samba suite for Debian GNU/Linux.
> [global]
>
> ## Browsing/Identification ###
>    workgroup = NTDOM
>    server string = %h server (Linux/Samba %v)
>    netbios name = PCA-ARNSTR
>    wins server = svr_gamma
>    dns proxy = no
>
> #### Debugging/Accounting ####
>    log file = /var/log/samba/log.%m
>    max log size = 1000
>    syslog = 0
>    panic action = /usr/share/samba/panic-action %d
>
> ####### Authentication #######
>    security = ADS
>    realm = "EE-CONSULTANTS.DE"
>    encrypt passwords = yes
>    passdb backend = tdbsam guest
>    passwd program = /usr/bin/passwd %u
>    passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
> *Retype\snew\sUNIX\spassword:* %n\n .
>    password server = svr_gamma.ee-consultants.de
>    obey pam restrictions = no
> #  guest account = nobody
>    invalid users = root
>    client use spnego = yes
>    idmap uid = 10000-20000
>    idmap gid = 10000-20000
>    winbind enum users = yes
>    winbind enum groups = yes
>    template shell = /bin/bash
>    winbind separator = +
>    passwd program = /usr/bin/passwd %u
>    passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
> *Retype\snew\sUNIX\spassword:* %n\n .
>    printing = cups
>    printcap name = cups
>
>    socket options = TCP_NODELAY
>
>
>
-- 
John H Terpstra
Email: jht@samba.org