samba - Oct 2005 - "Wbinfo -u" get user account sucessfully but "getent passwd" fails

Hi everybody,

I got a problem here with my Samba ADS member server. It functions as a
file server and works for a long time. A few weeks ago our Active
Directory domain controller failed due to power outage. We fixed it and
now an employee reports that he could not use the samba file server any
more. I restarted samba service and did the following testing:

1) getent passwd <thisUser>

    It gave me nothing. If I run getent to check other user accounts,
everything is OK. 

2) wbinfo -u | grep <thisUser>
    It shows <thisUser> does exist. 

I could not figure out what the reason is. Can anybody give me some
hint? I appreciate it. 


Steve Zeng

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Steve Zeng escreveu:
> 1) getent passwd <thisUser>
>     It gave me nothing. If I run getent to check other 
> user accounts, everything is OK.
> 2) wbinfo -u | grep <thisUser>
>     It shows <thisUser> does exist. 
> I could not figure out what the reason is. Can anybody 
> give me some hint? I appreciate it.
	If you compare the information from thisUser with
the information of otherUser, did you see any differences?

	Kind regards,

- --
//////////
// Felipe Augusto van de Wiel <felipe@paranacidade.org.br>
// CTI/Suporte - SEDU/PARANACIDADE
// http://www.paranacidade.org.br/
//////////
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFDT7WhCj65ZxU4gPQRAg2qAJ9i2/00h3lq529mLnoOrWCjxLziJwCfeb1x
zoOd4ZRigJ97ucjkK+Vu2RM=O1jd
-----END PGP SIGNATURE-----

It is really easy but I am an idiot :-) Thanks. 

I run it and actually it only shows me the username as follows:

# wbinfo -u | grep jho 
jho

NOTE: (jho is the user which is missing from "getent passwd")

# wbinfo -u | grep szeng
szeng

NOTE: szeng is a regualar user which is fine

It seems no difference. Any idea?

Steve Zeng
> -----Original Message-----
> From: samba-bounces+steve.zeng=ascalade.com@lists.samba.org 
> [mailto:samba-bounces+steve.zeng=ascalade.com@lists.samba.org]
>  On Behalf Of Felipe Augusto van de Wiel
> Sent: Friday, October 14, 2005 11:02 AM
> To: samba@lists.samba.org
> Subject: Re: [Samba] "Wbinfo -u" get user account 
> sucessfullybut "getentpasswd" fails
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Steve Zeng escreveu:
> > How can I compare them? "wbinfo" seems has no such options. 
> > Is there any other tools available?
> 
> 	wbinfo -u | grep <thisUser> > thisUser.txt
> 	wbinfo -u | grep <otherUser> > otherUser.txt
> 
> 	Than you can use diff or just compare by reading it to 
> see what you get different. :-)
> 
> 	Best regards,
> 
> - --
> //////////
> // Felipe Augusto van de Wiel <felipe@paranacidade.org.br> // 
> CTI/Suporte - SEDU/PARANACIDADE // 
> http://www.paranacidade.org.br/ ////////// -----BEGIN PGP 
> SIGNATURE-----
> Version: GnuPG v1.4.1 (GNU/Linux)
> Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
> 
> iD8DBQFDT/KrCj65ZxU4gPQRArdiAKC9+EJ+inX3semghsk0SM6c5m8AIwCeNcNm
> su79ZHOdU94uLeqKX3JCuI4> =eHSh
> -----END PGP SIGNATURE-----
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Steve Zeng escreveu:
> It is really easy but I am an idiot :-) Thanks. 
> I run it and actually it only shows me the username as follows:
> # wbinfo -u | grep jho 
> jho
> NOTE: (jho is the user which is missing from "getent passwd")
> # wbinfo -u | grep szeng
> szeng
> NOTE: szeng is a regualar user which is fine
> It seems no difference. Any idea?
	Hmmm, crap, sorry, I was thinking about a different
command. :-) Could you please try with this:

# pdbedit -L -v -u jho > jho.txt
# pdbedit -L -v -u szeng > szeng.txt

	Cheers,

- --
//////////
// Felipe Augusto van de Wiel <felipe@paranacidade.org.br>
// CTI/Suporte - SEDU/PARANACIDADE
// http://www.paranacidade.org.br/
//////////
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFDT/jgCj65ZxU4gPQRAi5lAKCUDAhCIfn+6UUNOBUukM1cn7vihACeJXbZ
G+5DQIDb/C1eI20WVgMtf0U=gd5K
-----END PGP SIGNATURE-----

NSCD is not running.  I will increase the log level and see what I can
get. Thank a lot.

Steve Zeng
> -----Original Message-----
> From: samba-bounces+steve.zeng=ascalade.com@lists.samba.org 
> [mailto:samba-bounces+steve.zeng=ascalade.com@lists.samba.org]
>  On Behalf Of Felipe Augusto van de Wiel
> Sent: Friday, October 14, 2005 12:29 PM
> To: samba@lists.samba.org
> Subject: Re: [Samba] "Wbinfo -u" get user account 
> sucessfullybut "getentpasswd" fails
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Steve Zeng escreveu:
> > Hmmm, I run it and the output make me confused:
> 
> > # pdbedit -L -v -u jho
> > Username not found!
> 
> > # pdbedit -L -v -u szeng
> > Username not found!
> 
> 	pdbedit queries the samba user database. wbinfo queries 
> the winbindd. When you use getent the user is not there, so, 
> for some reason, it is not "crossing"
> the line between winbindd and your environment.
> 
> 
> > Then I tried "su - szeng", it successfully switched into the
user
> > "szeng".
> 
> > Both "jho" and "szeng" are coming from Active
Directory, so
> do we need 
> > some other options when we run "pdbedit"?
> 
> 	No, you don't need to use pdbedit, what you should do 
> is increase the log level of winbindd and try to figure out 
> what's going on when you query the jho user.
> 
> 	I believe that you are not able to use "su - jho", a 
> few things come to my mind like 'nscd' and related cache 
> problems, also some communication delay. In any case, consult 
> the user accounts searching for differences sounds a 
> reasonable way to understand what is going on.
> 
> 	You could also check for patterns, like creation date, 
> user behaviour, creation mechanism and things like that, 
> which should lead you to the root of the problem.
> 
> 	Sorry if I don't have better answer for that.
> Kind regards,
> 
> - --
> //////////
> // Felipe Augusto van de Wiel <felipe@paranacidade.org.br> // 
> CTI/Suporte - SEDU/PARANACIDADE // 
> http://www.paranacidade.org.br/ ////////// -----BEGIN PGP 
> SIGNATURE-----
> Version: GnuPG v1.4.1 (GNU/Linux)
> Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
> 
> iD8DBQFDUAbuCj65ZxU4gPQRAvKuAKCnXKcyECdzi+ufuTxSuME5U8my7ACgt38C
> fkC6XHN6hkxP3qCx7jwWN6A> =jabM
> -----END PGP SIGNATURE-----
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>