samba - May 2005 - Two questions on winbind and nsswitch.conf

Greetings folks,

I am using winbind in /etc/nsswitch.conf for the passwd database
("passwd file winbind").  I have two little problems :

1. winbind return what look like machine trust account, ie
WORKSTATION1$, when running "wbinfo -u".  These account also show when
I
do "getent passwd".  Is it possible to make winbind not return these ?

2. The domain to which I connect have username in both upper- and
lowercase, ie user1 and USER2.  Is there a way to make winbind lowercase
all username ?

I am running Samba 3.0.10 on RHEL 4.

Thanks very much for any tips !

Etienne Goyer

On Wednesday 18 May 2005 12:45, Etienne Goyer wrote:
> Greetings folks,
>
> I am using winbind in /etc/nsswitch.conf for the passwd database
> ("passwd file winbind").  I have two little problems :
>
> 1. winbind return what look like machine trust account, ie
> WORKSTATION1$, when running "wbinfo -u".  These account also show
when I
> do "getent passwd".  Is it possible to make winbind not return
these ?
No.
>
> 2. The domain to which I connect have username in both upper- and
> lowercase, ie user1 and USER2.  Is there a way to make winbind lowercase
> all username ?
>
> I am running Samba 3.0.10 on RHEL 4.
Suggest you update to 3.0.14a (current stable) or 3.0.15pre3 (current SVN)
as I believe we made a few changes in this code. If I am not mistaken all user 
names are now returned in lower case. Domain names remain in uppercase as I 
recall.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.

John H Terpstra wrote:
> On Wednesday 18 May 2005 12:45, Etienne Goyer wrote:
>>2. The domain to which I connect have username in both upper- and
>>lowercase, ie user1 and USER2.  Is there a way to make winbind lowercase
>>all username ?
> 
> Suggest you update to 3.0.14a (current stable) or 3.0.15pre3 (current SVN)
> as I believe we made a few changes in this code. If I am not mistaken all
user
> names are now returned in lower case. Domain names remain in uppercase as I
> recall.

My error, the question was not pertinent to my setup in the first place.
 I assumed that the username from nsswitch would be the same as returned
by "wbinfo -u".  I just checked, and username are indeed lowercased
when
running "getent passwd".  I am using samba-3.0.10-1.4E rpm on RHEL 4.

Thanks very much for your prompt answer M. Terpstra.

One more question regarding winbind as a source of local Unix user via
nsswtich.conf.

Is it possible to make available as Unix user only members of a specific
Windows group ?  For example, make only members of the "Unix Users"
group in the Windows domain appear as local user when nsswitch is
configured to use winbind.

Thanks again !

Etienne Goyer

Rex Dieter wrote:
> Gerald (Jerry) Carter wrote:
> 
>> There was effort to start the required-membership-of
>> pam_winbind option but if never got finished.  Anyone
>> got some spare time ?
> 
> 
> FYI, enhancement request filed:
> https://bugzilla.samba.org/show_bug.cgi?id=2744
It was pointed out to me that this is already implemented.
$ man pam_winbind
for details.  Silly me, I had previously only looked in the winbind manual.

-- Rex