samba - Jan 2004 - Confusion as to how winbind and samba interact

Hi

while doing some investigation I noticed the following:

linux box + samba 3.0.0 with security = ads

if winbind in nsswitch.conf for passwd and group then everything ok.
if winbind not in nsswitch.conf and dameons restarted then samba
authentication stops working ( doing net view \\server returns access denied
).
if readd winbind to nsswitch .conf then have to restart daemons before
everything ok again.

this raises two questions:

(1) everything I'd read about samba + winbind implied that the nsswitch.conf
was only necessary if you wanted other unix services ( i.e. not samba ) to
use winbind - have I been stupid?

(2) with nsswitch.conf, the change should happen on the fly i.e. if it's
updated everything should start using the new configuration and you
shouldn't have to restart daemons to get them to use the new search path -
why am I not seeing this behaviour with samba/winbind?

any enlightenment would be appreciated

thanks

tim


***************************************************************************
This communication (including any attachments) contains confidential
information.  If you are not the intended recipient and you have received this
communication in error, you should destroy it without copying, disclosing or
otherwise using its contents.  Please notify the sender immediately of the
error.

Internet communications are not necessarily secure and may be intercepted or
changed after they are sent.  Abbey National Treasury Services plc does not
accept liability for any loss you may suffer as a result of interception or any
liability for such changes.  If you wish to confirm the origin or content of
this communication, please contact the sender by using an alternative means of
communication.

This communication does not create or modify any contract and, unless otherwise
stated, is not intended to be contractually binding.

Abbey National Treasury Services plc. Registered Office:  Abbey National House,
2 Triton Square, Regents Place, London NW1 3AN.  Registered in England under
Company Registration Number: 2338548.  Regulated by the Financial Services
Authority (FSA).
***************************************************************************

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Unix Service (ANTS) wrote:
> (1) everything I'd read about samba + winbind implied that 
 > the nsswitch.conf was only necessary if you wanted other
 > unix services ( i.e. not samba ) to use winbind

Nope. the nss interface is required by smbd as wel.
> (2) with nsswitch.conf, the change should happen on the 
 > fly i.e. if it's updated everything should start using
 > the new configuration and you shouldn't have to restart
 > daemons to get them to use the new search path -
> why am I not seeing this behaviour with samba/winbind?
You do have to restart because apparently this .so
files are loaded when the app is started.





cheers, jerry
  ----------------------------------------------------------------------
  Hewlett-Packard            ------------------------- http://www.hp.com
  SAMBA Team                 ---------------------- http://www.samba.org
  GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
  "If we're adding to the noise, turn off this song" --Switchfoot
(2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAD9SGIR7qMdg1EfYRAjTpAKCYwbBO03CXSLrQeXXPbjAvEm3NfQCfdo3f
l6+BfTvoH5pRctvS3IEuMcQ=dJH5
-----END PGP SIGNATURE-----