On 12/02/15 10:21, sk at green.no wrote:> samba-bounces at lists.samba.org wrote on 12.02.2015 11:10:21: > >> From: Rowland Penny <rowlandpenny at googlemail.com> >> To: samba at lists.samba.org >> Date: 12.02.2015 11:11 >> >> Does 'getent passwd <a domain user>' now show anything ? > No, I only get local users when executing getent passwdWell that is probably your problem, stop samba, leave the domain and rejoin, restart samba and see if getent works. Rowland
Rowland Penny schrieb am 12.02.2015 11:43:>>> Does 'getent passwd <a domain user>' now show anything ? >> No, I only get local users when executing getent passwd > > Well that is probably your problem, stop samba, leave the domain and > rejoin, restart samba and see if getent works.Well, to me this sounds like he just tried 'getent passwd' and not for example 'getent passwd administrator'... IMHO it is not exactly obvious, that the fact, that 'getent passwd' does not list the domain users, does not guarantee, that there is a problem. Hence Rowland explicitly asked for 'getent passwd <a domain user>', yet his answer is a bit unclear. So I just wanted to emphasize Rowland's point.
samba-bounces at lists.samba.org wrote on 02/12/2015 11:43:08 AM:> From: Rowland Penny <rowlandpenny at googlemail.com> > To: > Cc: samba at lists.samba.org > Date: 02/12/2015 11:44 AM> Well that is probably your problem, stop samba, leave the domain and > rejoin, restart samba and see if getent works.Unfortunately this didn't make getent work.
On 13/02/15 14:56, sk at green.no wrote:> samba-bounces at lists.samba.org wrote on 02/12/2015 11:43:08 AM: > >> From: Rowland Penny <rowlandpenny at googlemail.com> >> To: >> Cc: samba at lists.samba.org >> Date: 02/12/2015 11:44 AM >> Well that is probably your problem, stop samba, leave the domain and >> rejoin, restart samba and see if getent works. > Unfortunately this didn't make getent work.Well, until you get 'getent passwd <a domain user>' to show the info for the user, you cannot proceed. If you run (in a terminal) 'pam-auth-update' , does it show 'Winbind NT/Active Directory authentication' ? Rowland