Hervé Hénoch
2015-Feb-25 08:19 UTC
[Samba] getent passwd not return the same number of records from a call to another call
Here is my smb.conf (on member domain) : idmap config * : backend = tdb idmap config * : range = 2000-9999 idmap config * : schema_mode = rfc2307 idmap config DOMAIN : backend = ad idmap config DOMAIN : schema-_mode = rfc2307 idmap config DOMAIN : range = 10000-999999 winbind nss info = rfc2307 winbind trusted domains only = no winbind use default domain = yes winbind enum users = yes winbind enum groups = yes winbind refresh tickets = yes getent group | grep 700001 gives : domain users:x:70001: info:x:70001:toto,titi,tutu Same group id !!! Le 24/02/2015 21:34, Tim a ?crit :> Hello Herv?, > > what's your way of resolution? Are you using winbind, sssd,...? > > Regards > Tim > > Am 24. Februar 2015 20:53:15 MEZ, schrieb "Herv? H?noch" > <h.henoch at isc84.org>: > > Hello > > On AD Server : > -------------------- > > We have migrated from S3 to S4 with samba-tools classicupgrade. All is > ok : bind9, winbind but getent has a strange behavior. > > getent passwd doesn't return the same number of records. So a AD user > can be not present in the response of getent !!!! > > it can have a big difference of records returned from a call to another > call of getent passwd ... > > On the other hand, wbinfo -u returns always the same number of records. > > What can be the problem ? > > (I'm on a debian jessie, rfc2307 is on, and the installation of samba > has been done by apt-get ... ) > > > On AD domain member : > ------------------------------------------------------------------------ > > > We have the same problem (same distribution and installation). > Futhermore, "getent group" returns some groups with the same ID. > > Maybe problems are bounded. > > > Regards >-- Herv? H?noch Responsable informatique Institut Sainte Catherine 250 chemin de Baigne-Pieds CS 80005 ? 84918 AVIGNON cedex 9 T?l?phone : 04.90.27.57.44
Rowland Penny
2015-Feb-25 10:03 UTC
[Samba] getent passwd not return the same number of records from a call to another call
On 25/02/15 08:19, Herv? H?noch wrote:> Here is my smb.conf (on member domain) : > > idmap config * : backend = tdb > idmap config * : range = 2000-9999 > idmap config * : schema_mode = rfc2307 > idmap config DOMAIN : backend = ad > idmap config DOMAIN : schema-_mode = rfc2307 > idmap config DOMAIN : range = 10000-999999 > > winbind nss info = rfc2307 > winbind trusted domains only = no > winbind use default domain = yes > winbind enum users = yes > winbind enum groups = yes > winbind refresh tickets = yes > > getent group | grep 700001 gives : > domain users:x:70001: > info:x:70001:toto,titi,tutu > > Same group id !!! > > > > Le 24/02/2015 21:34, Tim a ?crit : >> Hello Herv?, >> >> what's your way of resolution? Are you using winbind, sssd,...? >> >> Regards >> Tim >> >> Am 24. Februar 2015 20:53:15 MEZ, schrieb "Herv? H?noch" >> <h.henoch at isc84.org>: >> >> Hello >> >> On AD Server : >> -------------------- >> >> We have migrated from S3 to S4 with samba-tools classicupgrade. >> All is >> ok : bind9, winbind but getent has a strange behavior. >> >> getent passwd doesn't return the same number of records. So a AD >> user >> can be not present in the response of getent !!!! >> >> it can have a big difference of records returned from a call to >> another >> call of getent passwd ... >> >> On the other hand, wbinfo -u returns always the same number of >> records. >> >> What can be the problem ? >> >> (I'm on a debian jessie, rfc2307 is on, and the installation of >> samba >> has been done by apt-get ... ) >> >> >> On AD domain member : >> ------------------------------------------------------------------------ >> >> >> We have the same problem (same distribution and installation). >> Futhermore, "getent group" returns some groups with the same ID. >> >> Maybe problems are bounded. >> >> >> Regards >> >does 'cat /etc/passwd | grep [i]nfo' return anything ?? Rowland
Rowland Penny
2015-Feb-25 10:06 UTC
[Samba] getent passwd not return the same number of records from a call to another call
On 25/02/15 10:03, Rowland Penny wrote:> On 25/02/15 08:19, Herv? H?noch wrote: >> Here is my smb.conf (on member domain) : >> >> idmap config * : backend = tdb >> idmap config * : range = 2000-9999 >> idmap config * : schema_mode = rfc2307 >> idmap config DOMAIN : backend = ad >> idmap config DOMAIN : schema-_mode = rfc2307 >> idmap config DOMAIN : range = 10000-999999 >> >> winbind nss info = rfc2307 >> winbind trusted domains only = no >> winbind use default domain = yes >> winbind enum users = yes >> winbind enum groups = yes >> winbind refresh tickets = yes >> >> getent group | grep 700001 gives : >> domain users:x:70001: >> info:x:70001:toto,titi,tutu >> >> Same group id !!! >> >> >> >> Le 24/02/2015 21:34, Tim a ?crit : >>> Hello Herv?, >>> >>> what's your way of resolution? Are you using winbind, sssd,...? >>> >>> Regards >>> Tim >>> >>> Am 24. Februar 2015 20:53:15 MEZ, schrieb "Herv? H?noch" >>> <h.henoch at isc84.org>: >>> >>> Hello >>> >>> On AD Server : >>> -------------------- >>> >>> We have migrated from S3 to S4 with samba-tools classicupgrade. >>> All is >>> ok : bind9, winbind but getent has a strange behavior. >>> >>> getent passwd doesn't return the same number of records. So a AD >>> user >>> can be not present in the response of getent !!!! >>> >>> it can have a big difference of records returned from a call to >>> another >>> call of getent passwd ... >>> >>> On the other hand, wbinfo -u returns always the same number of >>> records. >>> >>> What can be the problem ? >>> >>> (I'm on a debian jessie, rfc2307 is on, and the installation of >>> samba >>> has been done by apt-get ... ) >>> >>> >>> On AD domain member : >>> ------------------------------------------------------------------------ >>> >>> >>> >>> We have the same problem (same distribution and installation). >>> Futhermore, "getent group" returns some groups with the same ID. >>> >>> Maybe problems are bounded. >>> >>> >>> Regards >>> >> > > does 'cat /etc/passwd | grep [i]nfo' return anything ?? > > Rowland >OOPs, that should have been: Does 'cat /etc/group | grep [i]nfo' return anything ?? Rowland
Reasonably Related Threads
- getent passwd not return the same number of records from a call to another call
- getent passwd not return the same number of records from a call to another call
- getent passwd not return the same number of records from a call to another call
- getent passwd not return the same number of records from a call to another call
- getent passwd not return the same number of records from a call to another call