samba - Mar 2015 - Samba 4.1 gentent, ls, no display domain user name on Primary ACDC but wbinfo -u yes

Done.
Since I restarted samba service but not yet showing users.
: - (
Maybe there is something else I have to do.
> Date: Sun, 22 Mar 2015 22:24:49 +0000
> From: rowlandpenny at googlemail.com
> To: samba at lists.samba.org
> Subject: Re: [Samba] Samba 4.1 gentent, ls, no display domain user name on
Primary ACDC but wbinfo -u yes
> 
> On 22/03/15 21:55, Jhon P wrote:
> > The locate libnss_winbind.so display.
> >
> > /lib/libnss_winbind.so
> > /lib/libnss_winbind.so.2
> > /lib/x86_64-linux-gnu/libnss_winbind.so
> > /lib/x86_64-linux-gnu/libnss_winbind.so.2
> > /lib64/libnss_winbind.so
> > /lib64/libnss_winbind.so2
> > /usr/lib/x86_64-linux-gnu/libnss_winbind.so
> > /usr/lib/x86_64-linux-gnu/libnss_winbind.so.2
> > /usr/local/samba/lib/libnss_winbind.so
> > /usr/local/samba/lib/libnss_winbind.so.2
> > /usr/src/samba4/bin/shared/libnss_winbind.so.2
> >
> >
> > > From: patocius at hotmail.com
> > > To: rowlandpenny at googlemail.com; samba at lists.samba.org
> > > Date: Sun, 22 Mar 2015 20:04:52 +0000
> > > Subject: Re: [Samba] Samba 4.1 gentent, ls, no display domain
user
> > name on Primary ACDC but wbinfo -u yes
> > >
> > > Even "getent" does not show me the domain users.
> > >
> > > Yes, im rember, im install sernet version the first time, after
im
> > uninstall it.
> > > As we know? if the version of winbind is correct and if the samba
> > daemon running.
> > >
> > >
> > > Regards
> > >
> > > > Date: Sat, 21 Mar 2015 18:36:13 +0000
> > > > From: rowlandpenny at googlemail.com
> > > > To: samba at lists.samba.org
> > > > Subject: Re: [Samba] Samba 4.1 gentent, ls, no display
domain user
> > name on Primary ACDC but wbinfo -u yes
> > > >
> > > > On 21/03/15 18:08, Jhon P wrote:
> > > > > Ready changed what you asked me and restart the samba
service.
> > > > > Yet I only see the UID instead of domain users. :-/
> > > > >
> > > > > One question.
> > > > >
> > > > > I do not see the service "winbind or
winbindd" running, is this
> > correct.
> > > > > I can not find it in init.d
> > > > >
> > > > > Also "wbinfo -u" Show me the domain users.
> > > > >
> > > > > Thanks for helpme, sorry for noob question.
> > > > >
> > > > > > Date: Sat, 21 Mar 2015 09:00:37 +0000
> > > > > > From: rowlandpenny at googlemail.com
> > > > > > To: samba at lists.samba.org
> > > > > > Subject: Re: [Samba] Samba 4.1 gentent, ls, no
display domain user
> > > > > name on Primary ACDC but wbinfo -u yes
> > > > > >
> > > > > > On 21/03/15 00:10, Jhon P wrote:
> > > > > > > Now I realized what the documentation says,
sucessfull.
> > > > > > >
> > > > > > > I returned to run the above command and these
results changed.
> > > > > > >
> > > > > > > Change the settings of smb.conf, now looks:
> > > > > > >
> > > > > > > [global]
> > > > > > > workgroup = KENNEDY
> > > > > > > realm = kennedy.edu
> > > > > > > netbios name = PROTEUS
> > > > > > > server role = active directory domain
controller
> > > > > > > dns forwarder = 200.40.220.245
> > > > > > > allow dns updates = nonsecure and secure
> > > > > > > server services = rpc, nbt, wrepl, ldap,
cldap, kdc, drepl,
> > > > > > > winbind, ntp_signd, kcc, dnsupdate, dns, smb
> > > > > > > dcerpc endpoint servers = epmapper, wkssvc,
rpcecho, samr,
> > > > > > > netlogon, lsarpc, spoolss, drsuapi, dssetup,
unixinfo, browser,
> > > > > > > eventlog6, backupkey, dnsserver, winreg,
srvsvc
> > > > > > >
> > > > > > > idmap_ldb:use rfc2307 = yes
> > > > > > > #winbind use default domain = yes
> > > > > > > #winbind enum users = yes
> > > > > > > #winbind enum groups = yes
> > > > > > > #winbind nested groups = yes
> > > > > > > log level = 3
> > > > > > > log file = /var/log/samba/samba.log
> > > > > > > # unix charset = ISO8859-1
> > > > > > >
> > > > > > > #[netlogon antes]
> > > > > > > #path =
/usr/local/samba/var/locks/sysvol/kennedy.edu/scripts
> > > > > > > #read only = No
> > > > > > >
> > > > > > >
> > > > > > > Start of service.
> > > > > > >
> > > > > > > But I did not change anything is still
showing me the UID
> > instead of
> > > > > > > domain name, :-/ .
> > > > > > >
> > > > > > > > Date: Fri, 20 Mar 2015 21:46:58 +0000
> > > > > > > > From: rowlandpenny at googlemail.com
> > > > > > > > To: samba at lists.samba.org
> > > > > > > > Subject: Re: [Samba] Samba 4.1 gentent,
ls, no display
> > domain user
> > > > > > > name on Primary ACDC but wbinfo -u yes
> > > > > > > >
> > > > > > > > On 20/03/15 21:19, Jhon P wrote:
> > > > > > > > > Im think not provisioned with
provisioned with
> > '--use-rfc2307'
> > > > > > > > >
> > > > > > > > > root at proteus:~# ldbsearch -H
> > /usr/local/samba/private/sam.ldb -b
> > > > > > > > > 'dc=kennedy,dc=edu' -s sub
'(objectclass=msSFU30DomainInfo)'
> > > > > > > > > GENSEC backend
'gssapi_spnego' registered
> > > > > > > > > GENSEC backend
'gssapi_krb5' registered
> > > > > > > > > GENSEC backend
'gssapi_krb5_sasl' registered
> > > > > > > > > GENSEC backend 'schannel'
registered
> > > > > > > > > GENSEC backend 'spnego'
registered
> > > > > > > > > GENSEC backend 'ntlmssp'
registered
> > > > > > > > > GENSEC backend 'krb5'
registered
> > > > > > > > > GENSEC backend
'fake_gssapi_krb5' registered
> > > > > > > > > # Referral
> > > > > > > > > ref:
ldap://kennedy.edu/CN=Configuration,DC=kennedy,DC=edu
> > > > > > > > >
> > > > > > > > > # Referral
> > > > > > > > > ref:
ldap://kennedy.edu/DC=DomainDnsZones,DC=kennedy,DC=edu
> > > > > > > > >
> > > > > > > > > # Referral
> > > > > > > > > ref:
ldap://kennedy.edu/DC=ForestDnsZones,DC=kennedy,DC=edu
> > > > > > > > >
> > > > > > > > > # returned 3 records
> > > > > > > > > # 0 entries
> > > > > > > > > # 3 referrals
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > > Date: Fri, 20 Mar 2015
20:55:24 +0000
> > > > > > > > > > From: rowlandpenny at
googlemail.com
> > > > > > > > > > To: samba at lists.samba.org
> > > > > > > > > > Subject: Re: [Samba] Samba 4.1
gentent, ls, no display
> > > > > domain user
> > > > > > > > > name on Primary ACDC but wbinfo -u
yes
> > > > > > > > > >
> > > > > > > > > > On 20/03/15 20:39, Jhon P
wrote:
> > > > > > > > > > > OK, i try removing this
block, and add the line.
> > > > > > > > > > > Restart samba but nothing
happends.
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > > Date: Fri, 20 Mar
2015 20:01:04 +0000
> > > > > > > > > > > > From: rowlandpenny
at googlemail.com
> > > > > > > > > > > > To: samba at
lists.samba.org
> > > > > > > > > > > > Subject: Re: [Samba]
Samba 4.1 gentent, ls, no display
> > > > > > > domain user
> > > > > > > > > > > name on Primary ACDC but
wbinfo -u yes
> > > > > > > > > > > >
> > > > > > > > > > > > On 20/03/15 19:47,
Jhon P wrote:
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > > Yes im have a
file:
> > > > > > > > > > > > >
> > > > > > > > > > > > > -rw-r--r-- 1
root root 19K Jan 10 2014
> > libnss_winbind.so.2
> > > > > > > > > > > > >
> > > > > > > > > > > > > My pam:
> > > > > > > > > > > > > PAM profiles to
enable:
> > > > > > > > > > > > > ? [*] Unix
authentication
> > > > > > > > > > > > > ? [*] Winbind
NT/Active Directory authentication
> > > > > > > > > > > > > ? [ ]
ConsoleKit Session Management
> > > > > > > > > > > > > ? [ ]
Inheritable Capabilities Management
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > >> Date: Fri,
20 Mar 2015 18:21:57 +0000
> > > > > > > > > > > > >> From:
rowlandpenny at googlemail.com
> > > > > > > > > > > > >> To: samba
at lists.samba.org
> > > > > > > > > > > > >> Subject:
Re: [Samba] Samba 4.1 gentent, ls, no
> > > > > display domain
> > > > > > > > > > > user name on Primary ACDC
but wbinfo -u yes
> > > > > > > > > > > > >>
> > > > > > > > > > > > >> On 20/03/15
17:32, Jhon P wrote:
> > > > > > > > > > > > >>> I
install samba 4.1 from
> > > > > > > > > > > > >>> the
sources. In Debian 7.0 "wheezy"
> > > > > > > > > > > > >>> a year
ago.
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>> Thanks
for responding.
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>> From:
patocius at hotmail.com
> > > > > > > > > > > > >>> To:
rowlandpenny at googlemail.com
> > > > > > > > > > > > >>>
Subject: RE: [Samba] Samba 4.1 gentent, ls, no
> > display
> > > > > > > domain
> > > > > > > > > > > user name on Primary ACDC
but wbinfo -u yes
> > > > > > > > > > > > >>> Date:
Fri, 20 Mar 2015 17:28:05 +0000
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>> I
install samba 4.1 from the sources. In
> > Debian 7.0
> > > > > > > "wheezy" a
> > > > > > > > > > > year ago.
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>> Thanks
for responding.
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>
Patocius
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >>>>
Date: Fri, 20 Mar 2015 17:15:50 +0000
> > > > > > > > > > > > >>>>
From: rowlandpenny at googlemail.com
> > > > > > > > > > > > >>>> To:
samba at lists.samba.org
> > > > > > > > > > > > >>>>
Subject: Re: [Samba] Samba 4.1 gentent, ls,
> > no display
> > > > > > > domain
> > > > > > > > > > > user name on Primary ACDC
but wbinfo -u yes
> > > > > > > > > > > > >>>>
> > > > > > > > > > > > >>>> On
20/03/15 16:58, Jhon P wrote:
> > > > > > > > > > > > >>>>>
Hello friends:
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
I hope you can help me with this I'm
> > struggling a
> > > > > year ago
> > > > > > > > > > > > >>>>>
After breaking my head migrating a server with
> > > > > Samba Samba
> > > > > > > > > 2.1
> > > > > > > > > > > to 4.1 all stay perfect
and functional.
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
All files are in this domain controller for
> > now, and
> > > > > > > then be
> > > > > > > > > > > moved to a domain member,
"the file server".
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
I configure the server as ADDC Samba 4.1 and
> > up here
> > > > > > > all went
> > > > > > > > > > > well, the shares, the
users, winbind, NetLogons,
> > machines,
> > > > > etc.But
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
When I have to use the "ls" on the terminal
> > > > > display UID
> > > > > > > > > > > command instead of domain
user name.
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
-rwxrwx --- 1 root users 100K February 28, 2012
> > > > > > > protocolo.pdf
> > > > > > > > > > > > >>>>>
--- 1 root users -rwxrwx 21K June 27, 2013
> > > > > proyecto.doc
> > > > > > > > > > > > >>>>>
--- 1 root users -rwxrwx 21K June 21, 2013
> > Project
> > > > > 3?.doc
> > > > > > > > > > > > >>>>>
drwxrwxr-x 2 3000085 4.0K users Mar 17 12:59
> > > > > PROYECTO.txt
> > > > > > > > > > > > >>>>>
-rwxrwxr-- 1 3000085 28K users Mar 12 12:11
> > > > > segundo.doc
> > > > > > > > > Project
> > > > > > > > > > > > >>>>>
--- 1 root users -rwxrwx 96K July 22, 2013
> > > > > > > recomendaciones.cls
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
If I run the "gentent" command only shows me
> > posix
> > > > > users.
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
Example:
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
daemon: x: 1: 1: daemon: / usr / sbin: / bin
> > / sh
> > > > > > > > > > > > >>>>>
bin: x: 2: 2: bin: / bin: / bin / sh
> > > > > > > > > > > > >>>>>
sys: x: 3: 3: sys: / dev: / bin / sh
> > > > > > > > > > > > >>>>>
sync: x: 4: 65534: sync: / bin: / bin / sync
> > > > > > > > > > > > >>>>>
...
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
But if I do, "wbinfo -u"
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
cupcakes
> > > > > > > > > > > > >>>>>
claudiap
> > > > > > > > > > > > >>>>>
johanao
> > > > > > > > > > > > >>>>>
agustinap
> > > > > > > > > > > > >>>>>
gabrielaa
> > > > > > > > > > > > >>>>>
....
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
My nsswitch.conf
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
# /etc/nsswitch.conf
> > > > > > > > > > > > >>>>>
#
> > > > > > > > > > > > >>>>>
# Example configuration of GNU Name Service
> > Switch
> > > > > > > > > functionality.
> > > > > > > > > > > > >>>>>
# If you have the `glibc-doc-reference' and
> > `info'
> > > > > > > packages
> > > > > > > > > > > installed, try:
> > > > > > > > > > > > >>>>>
# `info libc "Name Service Switch"' for
> > > > > information about
> > > > > > > > > this
> > > > > > > > > > > file.
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
passwd: compat winbind
> > > > > > > > > > > > >>>>>
group: compat winbind
> > > > > > > > > > > > >>>>>
shadow: compat
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
hosts: files mdns4_minimal [NOTFOUND=return]
> > dns mdns4
> > > > > > > > > > > > >>>>>
networks: files
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
protocols: db files
> > > > > > > > > > > > >>>>>
services: db files
> > > > > > > > > > > > >>>>>
ethers: db files
> > > > > > > > > > > > >>>>>
rpc: db files
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
netgroup: nis
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
My smb.conf
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
[global]
> > > > > > > > > > > > >>>>>
workgroup = PROTEUS
> > > > > > > > > > > > >>>>>
realm = proteus.local
> > > > > > > > > > > > >>>>>
netbios name = HARDCORE
> > > > > > > > > > > > >>>>>
server role = active directory domain controller
> > > > > > > > > > > > >>>>>
dns forwarder = 200.40.220.245
> > > > > > > > > > > > >>>>>
allow dns updates = nonsecure and secure
> > > > > > > > > > > > >>>>>
server services = rpc, nbt, wrepl, ldap,
> > cldap, kdc,
> > > > > > > drepl,
> > > > > > > > > > > winbind, ntp_signd, kcc,
dnsupdate, dns, smb
> > > > > > > > > > > > >>>>>
dcerpc endpoint servers = epmapper, wkssvc,
> > > > > rpcecho, samr,
> > > > > > > > > > > netlogon, lsarpc,
spoolss, drsuapi, dssetup, unixinfo,
> > > > > browser,
> > > > > > > > > > > eventlog6, backupkey,
dnsserver, winreg, srvsvc
> > > > > > > > > > > > >>>>>
winbind enum users = yes
> > > > > > > > > > > > >>>>>
winbind enum groups = yes
> > > > > > > > > > > > >>>>>
winbind use default domain = yes
> > > > > > > > > > > > >>>>>
winbind nested groups = yes
> > > > > > > > > > > > >>>>>
log level = 3
> > > > > > > > > > > > >>>>>
log file = /var/log/samba/samba.log
> > > > > > > > > > > > >>>>>
# unix charset = ISO8859-1
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
I appreciate any help you can give me
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>>>
Regards.
> > > > > > > > > > > > >>>>>
> > > > > > > > > > > > >>>> How
did you install samba4, did you compile it
> > > > > yourself
> > > > > > > or was
> > > > > > > > > > > it from
> > > > > > > > > > > > >>>>
packages and on what OS.
> > > > > > > > > > > > >>>>
> > > > > > > > > > > > >>>> If
you did compile it yourself, there is a couple
> > > > > of links
> > > > > > > > > that
> > > > > > > > > > > will
> > > > > > > > > > > > >>>>
need creating and your users & groups will
> > need to have
> > > > > > > > > > > uidNumbers &
> > > > > > > > > > > > >>>>
gidNumbers.
> > > > > > > > > > > > >>>>
> > > > > > > > > > > > >>>>
Rowland
> > > > > > > > > > > > >>>> --
> > > > > > > > > > > > >>>> To
unsubscribe from this list go to the following
> > > > > URL and
> > > > > > > > > read the
> > > > > > > > > > > > >>>>
instructions:
> > > > > https://lists.samba.org/mailman/options/samba
> > > > > > > > > > > > >>>
> > > > > > > > > > > > >> OK, have
you got a link (or a file)
> > > > > > > > > > > > >>
/lib/x86_64-linux-gnu/libnss_winbind.so.2 ?
> > > > > > > > > > > > >>
> > > > > > > > > > > > >> What does
'pam-auth-update' show ?
> > > > > > > > > > > > >>
> > > > > > > > > > > > >> Rowland
> > > > > > > > > > > > >>
> > > > > > > > > > > > >> --
> > > > > > > > > > > > >> To
unsubscribe from this list go to the
> > following URL and
> > > > > > > > > read the
> > > > > > > > > > > > >>
instructions:
> > > > > https://lists.samba.org/mailman/options/samba
> > > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > OK, try removing
this block from smb.conf on the DC:
> > > > > > > > > > > >
> > > > > > > > > > > > Winbind enum users =
yes
> > > > > > > > > > > > Winbind enum groups
= yes
> > > > > > > > > > > > Winbind use default
domain = yes
> > > > > > > > > > > > Winbind nested
groups = yes
> > > > > > > > > > > >
> > > > > > > > > > > > Add:
> > > > > > > > > > > >
> > > > > > > > > > > > idmap_ldb:use
rfc2307 = yes
> > > > > > > > > > > >
> > > > > > > > > > > > Rowland
> > > > > > > > > > > >
> > > > > > > > > > > > --
> > > > > > > > > > > > To unsubscribe from
this list go to the following
> > URL and
> > > > > > > read the
> > > > > > > > > > > > instructions:
> > https://lists.samba.org/mailman/options/samba
> > > > > > > > > >
> > > > > > > > > > can you remember if you
provisioned with '--use-rfc2307' ?
> > > > > > > > > >
> > > > > > > > > > If unsure, you can find out if
the required schema
> > extension is
> > > > > > > > > > installed with:
> > > > > > > > > >
> > > > > > > > > > ldbsearch -H
/usr/local/samba/private/sam.ldb -b
> > > > > > > 'dc=example,dc=com' -s
> > > > > > > > > > sub
'(objectclass=msSFU30DomainInfo)'
> > > > > > > > > >
> > > > > > > > > > This relies on ldb-tools being
installed normally, but
> > as you
> > > > > > > compiled
> > > > > > > > > > samba yourself it should be
available
> > > > > > > > > >
> > > > > > > > > > Rowland
> > > > > > > > > >
> > > > > > > > > > --
> > > > > > > > > > To unsubscribe from this list
go to the following URL and
> > > > > read the
> > > > > > > > > > instructions:
> > https://lists.samba.org/mailman/options/samba
> > > > > > > >
> > > > > > > > have a look here:
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > >
> >
https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Extending_the_Schema_for_NIS_Extensions
> > > > > > > >
> > > > > > > > Rowland
> > > > > > > > --
> > > > > > > > To unsubscribe from this list go to the
following URL and
> > read the
> > > > > > > > instructions:
https://lists.samba.org/mailman/options/samba
> > > > > >
> > > > > > OK, you need one further change after adding the
> > ypServ30.ldif, you
> > > > > > need to change this:
> > > > > >
> > > > > > server services = rpc, nbt, wrepl, ldap, cldap,
kdc, drepl,
> > winbind,
> > > > > > ntp_signd, kcc, dnsupdate, dns, smb
> > > > > >
> > > > > > To this:
> > > > > >
> > > > > > server services = s3fs, rpc, nbt, wrepl, ldap,
cldap, kdc, drepl,
> > > > > > winbind, ntp_signd, kcc, dnsupdate, dns
> > > > > >
> > > > > > Rowland
> > > > > >
> > > > > > --
> > > > > > To unsubscribe from this list go to the following
URL and read the
> > > > > > instructions:
https://lists.samba.org/mailman/options/samba
> > > >
> > > > OK, you have extended the schema as per the webpage link I
posted, you
> > > > are now using s3fs instead of ntvfs and have restarted
samba, you
> > should
> > > > be able to get users with getent, did you have any version
of samba
> > > > installed before installing samba4 ? if so you could have
the wrong
> > > > libnss_winbind files in /lib
> > > >
> > > > As to your winbind question, If you are running any version
of samba4
> > > > that is less than 4.2, winbind is built into the
'samba' daemon. With
> > > > samba 4.2, the 'samba' daemon starts the
'winbindd' deamon instead.
> > > >
> > > > Rowland
> > > >
> > > > --
> > > > To unsubscribe from this list go to the following URL and
read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read
the
> > > instructions: https://lists.samba.org/mailman/options/samba
> 
> OK, I get:
> 
> /lib/x86_64-linux-gnu/libnss_winbind.so
> /lib/x86_64-linux-gnu/libnss_winbind.so.2
> /usr/local/samba/lib/libnss_winbind.so
> /usr/local/samba/lib/libnss_winbind.so.2
> /usr/src/samba-4.2.0/bin/default/nsswitch/libnss_winbind.so
> /usr/src/samba-4.2.0/bin/shared/libnss_winbind.so.2
> 
> This is on Debian 7.8 running 4.1.7 from backports *AND* I have also
> built 4.2.0 but this is not being used.
> 
> So, backup these two files:
> 
> /lib/x86_64-linux-gnu/libnss_winbind.so
> /lib/x86_64-linux-gnu/libnss_winbind.so.2
> 
> Rename them or move them out of the way, but do not delete them just in
> case they are the correct ones :-)
> 
> Then copy /usr/local/samba/lib/libnss_winbind.so.2 to /lib/x86_64-linux-gnu
> 
> cp /usr/local/samba/lib/libnss_winbind.so.2 /lib/x86_64-linux-gnu/
> 
> create a symbolic link
> 
> ln -s /lib/x86_64-linux-gnu/libnss_winbind.so.2
> /lib/x86_64-linux-gnu/libnss_winbind.so
> 
> You will now have the correct winbind files for the samba4 you compiled
> yourself
> 
> Rowland
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

It will be necessary to join this PDC to the domain?
I did this once and it was not me well and I had to restore the backup.

The samba documentation does not say anything of this.
Remember this isnt a member server this is the PDC, on samba ACDC doc say this:

"We do not recommend using the Domain Controller as a file Server. This is
due to issues with the winbind internal to the Domain Controller."

But I also need to use it because I had no other server to use as a file server.

If there is no chance you do not want to waste time with this.

Many thank you very much.

> From: patocius at hotmail.com
> To: rowlandpenny at googlemail.com; samba at lists.samba.org
> Date: Sun, 22 Mar 2015 23:22:38 +0000
> Subject: Re: [Samba] Samba 4.1 gentent, ls, no display domain user name on
Primary ACDC but wbinfo -u yes
> 
> Done.
> Since I restarted samba service but not yet showing users.
> : - (
> Maybe there is something else I have to do.
> 
> > Date: Sun, 22 Mar 2015 22:24:49 +0000
> > From: rowlandpenny at googlemail.com
> > To: samba at lists.samba.org
> > Subject: Re: [Samba] Samba 4.1 gentent, ls, no display domain user
name on Primary ACDC but wbinfo -u yes
> > 
> > On 22/03/15 21:55, Jhon P wrote:
> > > The locate libnss_winbind.so display.
> > >
> > > /lib/libnss_winbind.so
> > > /lib/libnss_winbind.so.2
> > > /lib/x86_64-linux-gnu/libnss_winbind.so
> > > /lib/x86_64-linux-gnu/libnss_winbind.so.2
> > > /lib64/libnss_winbind.so
> > > /lib64/libnss_winbind.so2
> > > /usr/lib/x86_64-linux-gnu/libnss_winbind.so
> > > /usr/lib/x86_64-linux-gnu/libnss_winbind.so.2
> > > /usr/local/samba/lib/libnss_winbind.so
> > > /usr/local/samba/lib/libnss_winbind.so.2
> > > /usr/src/samba4/bin/shared/libnss_winbind.so.2
> > >
> > >
> > > > From: patocius at hotmail.com
> > > > To: rowlandpenny at googlemail.com; samba at lists.samba.org
> > > > Date: Sun, 22 Mar 2015 20:04:52 +0000
> > > > Subject: Re: [Samba] Samba 4.1 gentent, ls, no display
domain user
> > > name on Primary ACDC but wbinfo -u yes
> > > >
> > > > Even "getent" does not show me the domain users.
> > > >
> > > > Yes, im rember, im install sernet version the first time,
after im
> > > uninstall it.
> > > > As we know? if the version of winbind is correct and if the
samba
> > > daemon running.
> > > >
> > > >
> > > > Regards
> > > >
> > > > > Date: Sat, 21 Mar 2015 18:36:13 +0000
> > > > > From: rowlandpenny at googlemail.com
> > > > > To: samba at lists.samba.org
> > > > > Subject: Re: [Samba] Samba 4.1 gentent, ls, no display
domain user
> > > name on Primary ACDC but wbinfo -u yes
> > > > >
> > > > > On 21/03/15 18:08, Jhon P wrote:
> > > > > > Ready changed what you asked me and restart the
samba service.
> > > > > > Yet I only see the UID instead of domain users.
:-/
> > > > > >
> > > > > > One question.
> > > > > >
> > > > > > I do not see the service "winbind or
winbindd" running, is this
> > > correct.
> > > > > > I can not find it in init.d
> > > > > >
> > > > > > Also "wbinfo -u" Show me the domain
users.
> > > > > >
> > > > > > Thanks for helpme, sorry for noob question.
> > > > > >
> > > > > > > Date: Sat, 21 Mar 2015 09:00:37 +0000
> > > > > > > From: rowlandpenny at googlemail.com
> > > > > > > To: samba at lists.samba.org
> > > > > > > Subject: Re: [Samba] Samba 4.1 gentent, ls,
no display domain user
> > > > > > name on Primary ACDC but wbinfo -u yes
> > > > > > >
> > > > > > > On 21/03/15 00:10, Jhon P wrote:
> > > > > > > > Now I realized what the documentation
says, sucessfull.
> > > > > > > >
> > > > > > > > I returned to run the above command and
these results changed.
> > > > > > > >
> > > > > > > > Change the settings of smb.conf, now
looks:
> > > > > > > >
> > > > > > > > [global]
> > > > > > > > workgroup = KENNEDY
> > > > > > > > realm = kennedy.edu
> > > > > > > > netbios name = PROTEUS
> > > > > > > > server role = active directory domain
controller
> > > > > > > > dns forwarder = 200.40.220.245
> > > > > > > > allow dns updates = nonsecure and secure
> > > > > > > > server services = rpc, nbt, wrepl, ldap,
cldap, kdc, drepl,
> > > > > > > > winbind, ntp_signd, kcc, dnsupdate, dns,
smb
> > > > > > > > dcerpc endpoint servers = epmapper,
wkssvc, rpcecho, samr,
> > > > > > > > netlogon, lsarpc, spoolss, drsuapi,
dssetup, unixinfo, browser,
> > > > > > > > eventlog6, backupkey, dnsserver, winreg,
srvsvc
> > > > > > > >
> > > > > > > > idmap_ldb:use rfc2307 = yes
> > > > > > > > #winbind use default domain = yes
> > > > > > > > #winbind enum users = yes
> > > > > > > > #winbind enum groups = yes
> > > > > > > > #winbind nested groups = yes
> > > > > > > > log level = 3
> > > > > > > > log file = /var/log/samba/samba.log
> > > > > > > > # unix charset = ISO8859-1
> > > > > > > >
> > > > > > > > #[netlogon antes]
> > > > > > > > #path =
/usr/local/samba/var/locks/sysvol/kennedy.edu/scripts
> > > > > > > > #read only = No
> > > > > > > >
> > > > > > > >
> > > > > > > > Start of service.
> > > > > > > >
> > > > > > > > But I did not change anything is still
showing me the UID
> > > instead of
> > > > > > > > domain name, :-/ .
> > > > > > > >
> > > > > > > > > Date: Fri, 20 Mar 2015 21:46:58
+0000
> > > > > > > > > From: rowlandpenny at
googlemail.com
> > > > > > > > > To: samba at lists.samba.org
> > > > > > > > > Subject: Re: [Samba] Samba 4.1
gentent, ls, no display
> > > domain user
> > > > > > > > name on Primary ACDC but wbinfo -u yes
> > > > > > > > >
> > > > > > > > > On 20/03/15 21:19, Jhon P wrote:
> > > > > > > > > > Im think not provisioned with
provisioned with
> > > '--use-rfc2307'
> > > > > > > > > >
> > > > > > > > > > root at proteus:~# ldbsearch
-H
> > > /usr/local/samba/private/sam.ldb -b
> > > > > > > > > > 'dc=kennedy,dc=edu' -s
sub '(objectclass=msSFU30DomainInfo)'
> > > > > > > > > > GENSEC backend
'gssapi_spnego' registered
> > > > > > > > > > GENSEC backend
'gssapi_krb5' registered
> > > > > > > > > > GENSEC backend
'gssapi_krb5_sasl' registered
> > > > > > > > > > GENSEC backend
'schannel' registered
> > > > > > > > > > GENSEC backend
'spnego' registered
> > > > > > > > > > GENSEC backend
'ntlmssp' registered
> > > > > > > > > > GENSEC backend 'krb5'
registered
> > > > > > > > > > GENSEC backend
'fake_gssapi_krb5' registered
> > > > > > > > > > # Referral
> > > > > > > > > > ref:
ldap://kennedy.edu/CN=Configuration,DC=kennedy,DC=edu
> > > > > > > > > >
> > > > > > > > > > # Referral
> > > > > > > > > > ref:
ldap://kennedy.edu/DC=DomainDnsZones,DC=kennedy,DC=edu
> > > > > > > > > >
> > > > > > > > > > # Referral
> > > > > > > > > > ref:
ldap://kennedy.edu/DC=ForestDnsZones,DC=kennedy,DC=edu
> > > > > > > > > >
> > > > > > > > > > # returned 3 records
> > > > > > > > > > # 0 entries
> > > > > > > > > > # 3 referrals
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > > Date: Fri, 20 Mar 2015
20:55:24 +0000
> > > > > > > > > > > From: rowlandpenny at
googlemail.com
> > > > > > > > > > > To: samba at
lists.samba.org
> > > > > > > > > > > Subject: Re: [Samba]
Samba 4.1 gentent, ls, no display
> > > > > > domain user
> > > > > > > > > > name on Primary ACDC but
wbinfo -u yes
> > > > > > > > > > >
> > > > > > > > > > > On 20/03/15 20:39, Jhon P
wrote:
> > > > > > > > > > > > OK, i try removing
this block, and add the line.
> > > > > > > > > > > > Restart samba but
nothing happends.
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > > Date: Fri, 20
Mar 2015 20:01:04 +0000
> > > > > > > > > > > > > From:
rowlandpenny at googlemail.com
> > > > > > > > > > > > > To: samba at
lists.samba.org
> > > > > > > > > > > > > Subject: Re:
[Samba] Samba 4.1 gentent, ls, no display
> > > > > > > > domain user
> > > > > > > > > > > > name on Primary ACDC
but wbinfo -u yes
> > > > > > > > > > > > >
> > > > > > > > > > > > > On 20/03/15
19:47, Jhon P wrote:
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > Yes im
have a file:
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > -rw-r--r--
1 root root 19K Jan 10 2014
> > > libnss_winbind.so.2
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > My pam:
> > > > > > > > > > > > > > PAM
profiles to enable:
> > > > > > > > > > > > > > ? [*] Unix
authentication
> > > > > > > > > > > > > > ? [*]
Winbind NT/Active Directory authentication
> > > > > > > > > > > > > > ? [ ]
ConsoleKit Session Management
> > > > > > > > > > > > > > ? [ ]
Inheritable Capabilities Management
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >> Date:
Fri, 20 Mar 2015 18:21:57 +0000
> > > > > > > > > > > > > >> From:
rowlandpenny at googlemail.com
> > > > > > > > > > > > > >> To:
samba at lists.samba.org
> > > > > > > > > > > > > >>
Subject: Re: [Samba] Samba 4.1 gentent, ls, no
> > > > > > display domain
> > > > > > > > > > > > user name on Primary
ACDC but wbinfo -u yes
> > > > > > > > > > > > > >>
> > > > > > > > > > > > > >> On
20/03/15 17:32, Jhon P wrote:
> > > > > > > > > > > > > >>> I
install samba 4.1 from
> > > > > > > > > > > > > >>>
the sources. In Debian 7.0 "wheezy"
> > > > > > > > > > > > > >>> a
year ago.
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
Thanks for responding.
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
From: patocius at hotmail.com
> > > > > > > > > > > > > >>>
To: rowlandpenny at googlemail.com
> > > > > > > > > > > > > >>>
Subject: RE: [Samba] Samba 4.1 gentent, ls, no
> > > display
> > > > > > > > domain
> > > > > > > > > > > > user name on Primary
ACDC but wbinfo -u yes
> > > > > > > > > > > > > >>>
Date: Fri, 20 Mar 2015 17:28:05 +0000
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>> I
install samba 4.1 from the sources. In
> > > Debian 7.0
> > > > > > > > "wheezy" a
> > > > > > > > > > > > year ago.
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
Thanks for responding.
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >>>
Patocius
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > >
>>>> Date: Fri, 20 Mar 2015 17:15:50 +0000
> > > > > > > > > > > > >
>>>> From: rowlandpenny at googlemail.com
> > > > > > > > > > > > >
>>>> To: samba at lists.samba.org
> > > > > > > > > > > > >
>>>> Subject: Re: [Samba] Samba 4.1 gentent, ls,
> > > no display
> > > > > > > > domain
> > > > > > > > > > > > user name on Primary
ACDC but wbinfo -u yes
> > > > > > > > > > > > >
>>>>
> > > > > > > > > > > > >
>>>> On 20/03/15 16:58, Jhon P wrote:
> > > > > > > > > > > > >
>>>>> Hello friends:
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> I hope you can help me with this I'm
> > > struggling a
> > > > > > year ago
> > > > > > > > > > > > >
>>>>> After breaking my head migrating a server with
> > > > > > Samba Samba
> > > > > > > > > > 2.1
> > > > > > > > > > > > to 4.1 all stay
perfect and functional.
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> All files are in this domain controller for
> > > now, and
> > > > > > > > then be
> > > > > > > > > > > > moved to a domain
member, "the file server".
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> I configure the server as ADDC Samba 4.1 and
> > > up here
> > > > > > > > all went
> > > > > > > > > > > > well, the shares,
the users, winbind, NetLogons,
> > > machines,
> > > > > > etc.But
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> When I have to use the "ls" on the terminal
> > > > > > display UID
> > > > > > > > > > > > command instead of
domain user name.
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> -rwxrwx --- 1 root users 100K February 28, 2012
> > > > > > > > protocolo.pdf
> > > > > > > > > > > > >
>>>>> --- 1 root users -rwxrwx 21K June 27, 2013
> > > > > > proyecto.doc
> > > > > > > > > > > > >
>>>>> --- 1 root users -rwxrwx 21K June 21, 2013
> > > Project
> > > > > > 3?.doc
> > > > > > > > > > > > >
>>>>> drwxrwxr-x 2 3000085 4.0K users Mar 17 12:59
> > > > > > PROYECTO.txt
> > > > > > > > > > > > >
>>>>> -rwxrwxr-- 1 3000085 28K users Mar 12 12:11
> > > > > > segundo.doc
> > > > > > > > > > Project
> > > > > > > > > > > > >
>>>>> --- 1 root users -rwxrwx 96K July 22, 2013
> > > > > > > > recomendaciones.cls
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> If I run the "gentent" command only shows me
> > > posix
> > > > > > users.
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> Example:
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> daemon: x: 1: 1: daemon: / usr / sbin: / bin
> > > / sh
> > > > > > > > > > > > >
>>>>> bin: x: 2: 2: bin: / bin: / bin / sh
> > > > > > > > > > > > >
>>>>> sys: x: 3: 3: sys: / dev: / bin / sh
> > > > > > > > > > > > >
>>>>> sync: x: 4: 65534: sync: / bin: / bin / sync
> > > > > > > > > > > > >
>>>>> ...
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> But if I do, "wbinfo -u"
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> cupcakes
> > > > > > > > > > > > >
>>>>> claudiap
> > > > > > > > > > > > >
>>>>> johanao
> > > > > > > > > > > > >
>>>>> agustinap
> > > > > > > > > > > > >
>>>>> gabrielaa
> > > > > > > > > > > > >
>>>>> ....
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> My nsswitch.conf
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> # /etc/nsswitch.conf
> > > > > > > > > > > > >
>>>>> #
> > > > > > > > > > > > >
>>>>> # Example configuration of GNU Name Service
> > > Switch
> > > > > > > > > > functionality.
> > > > > > > > > > > > >
>>>>> # If you have the `glibc-doc-reference' and
> > > `info'
> > > > > > > > packages
> > > > > > > > > > > > installed, try:
> > > > > > > > > > > > >
>>>>> # `info libc "Name Service Switch"' for
> > > > > > information about
> > > > > > > > > > this
> > > > > > > > > > > > file.
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> passwd: compat winbind
> > > > > > > > > > > > >
>>>>> group: compat winbind
> > > > > > > > > > > > >
>>>>> shadow: compat
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> hosts: files mdns4_minimal [NOTFOUND=return]
> > > dns mdns4
> > > > > > > > > > > > >
>>>>> networks: files
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> protocols: db files
> > > > > > > > > > > > >
>>>>> services: db files
> > > > > > > > > > > > >
>>>>> ethers: db files
> > > > > > > > > > > > >
>>>>> rpc: db files
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> netgroup: nis
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> My smb.conf
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> [global]
> > > > > > > > > > > > >
>>>>> workgroup = PROTEUS
> > > > > > > > > > > > >
>>>>> realm = proteus.local
> > > > > > > > > > > > >
>>>>> netbios name = HARDCORE
> > > > > > > > > > > > >
>>>>> server role = active directory domain controller
> > > > > > > > > > > > >
>>>>> dns forwarder = 200.40.220.245
> > > > > > > > > > > > >
>>>>> allow dns updates = nonsecure and secure
> > > > > > > > > > > > >
>>>>> server services = rpc, nbt, wrepl, ldap,
> > > cldap, kdc,
> > > > > > > > drepl,
> > > > > > > > > > > > winbind, ntp_signd,
kcc, dnsupdate, dns, smb
> > > > > > > > > > > > >
>>>>> dcerpc endpoint servers = epmapper, wkssvc,
> > > > > > rpcecho, samr,
> > > > > > > > > > > > netlogon, lsarpc,
spoolss, drsuapi, dssetup, unixinfo,
> > > > > > browser,
> > > > > > > > > > > > eventlog6,
backupkey, dnsserver, winreg, srvsvc
> > > > > > > > > > > > >
>>>>> winbind enum users = yes
> > > > > > > > > > > > >
>>>>> winbind enum groups = yes
> > > > > > > > > > > > >
>>>>> winbind use default domain = yes
> > > > > > > > > > > > >
>>>>> winbind nested groups = yes
> > > > > > > > > > > > >
>>>>> log level = 3
> > > > > > > > > > > > >
>>>>> log file = /var/log/samba/samba.log
> > > > > > > > > > > > >
>>>>> # unix charset = ISO8859-1
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> I appreciate any help you can give me
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>>> Regards.
> > > > > > > > > > > > >
>>>>>
> > > > > > > > > > > > >
>>>> How did you install samba4, did you compile it
> > > > > > yourself
> > > > > > > > or was
> > > > > > > > > > > > it from
> > > > > > > > > > > > >
>>>> packages and on what OS.
> > > > > > > > > > > > >
>>>>
> > > > > > > > > > > > >
>>>> If you did compile it yourself, there is a couple
> > > > > > of links
> > > > > > > > > > that
> > > > > > > > > > > > will
> > > > > > > > > > > > >
>>>> need creating and your users & groups will
> > > need to have
> > > > > > > > > > > > uidNumbers &
> > > > > > > > > > > > >
>>>> gidNumbers.
> > > > > > > > > > > > >
>>>>
> > > > > > > > > > > > >
>>>> Rowland
> > > > > > > > > > > > >
>>>> --
> > > > > > > > > > > > >
>>>> To unsubscribe from this list go to the following
> > > > > > URL and
> > > > > > > > > > read the
> > > > > > > > > > > > >
>>>> instructions:
> > > > > > https://lists.samba.org/mailman/options/samba
> > > > > > > > > > > > > >>>
> > > > > > > > > > > > > >> OK,
have you got a link (or a file)
> > > > > > > > > > > > > >>
/lib/x86_64-linux-gnu/libnss_winbind.so.2 ?
> > > > > > > > > > > > > >>
> > > > > > > > > > > > > >> What
does 'pam-auth-update' show ?
> > > > > > > > > > > > > >>
> > > > > > > > > > > > > >>
Rowland
> > > > > > > > > > > > > >>
> > > > > > > > > > > > > >> --
> > > > > > > > > > > > > >> To
unsubscribe from this list go to the
> > > following URL and
> > > > > > > > > > read the
> > > > > > > > > > > > > >>
instructions:
> > > > > > https://lists.samba.org/mailman/options/samba
> > > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > > OK, try
removing this block from smb.conf on the DC:
> > > > > > > > > > > > >
> > > > > > > > > > > > > Winbind enum
users = yes
> > > > > > > > > > > > > Winbind enum
groups = yes
> > > > > > > > > > > > > Winbind use
default domain = yes
> > > > > > > > > > > > > Winbind nested
groups = yes
> > > > > > > > > > > > >
> > > > > > > > > > > > > Add:
> > > > > > > > > > > > >
> > > > > > > > > > > > > idmap_ldb:use
rfc2307 = yes
> > > > > > > > > > > > >
> > > > > > > > > > > > > Rowland
> > > > > > > > > > > > >
> > > > > > > > > > > > > --
> > > > > > > > > > > > > To unsubscribe
from this list go to the following
> > > URL and
> > > > > > > > read the
> > > > > > > > > > > > > instructions:
> > > https://lists.samba.org/mailman/options/samba
> > > > > > > > > > >
> > > > > > > > > > > can you remember if you
provisioned with '--use-rfc2307' ?
> > > > > > > > > > >
> > > > > > > > > > > If unsure, you can find
out if the required schema
> > > extension is
> > > > > > > > > > > installed with:
> > > > > > > > > > >
> > > > > > > > > > > ldbsearch -H
/usr/local/samba/private/sam.ldb -b
> > > > > > > > 'dc=example,dc=com' -s
> > > > > > > > > > > sub
'(objectclass=msSFU30DomainInfo)'
> > > > > > > > > > >
> > > > > > > > > > > This relies on ldb-tools
being installed normally, but
> > > as you
> > > > > > > > compiled
> > > > > > > > > > > samba yourself it should
be available
> > > > > > > > > > >
> > > > > > > > > > > Rowland
> > > > > > > > > > >
> > > > > > > > > > > --
> > > > > > > > > > > To unsubscribe from this
list go to the following URL and
> > > > > > read the
> > > > > > > > > > > instructions:
> > > https://lists.samba.org/mailman/options/samba
> > > > > > > > >
> > > > > > > > > have a look here:
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > >
> > >
https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Extending_the_Schema_for_NIS_Extensions
> > > > > > > > >
> > > > > > > > > Rowland
> > > > > > > > > --
> > > > > > > > > To unsubscribe from this list go to
the following URL and
> > > read the
> > > > > > > > > instructions:
https://lists.samba.org/mailman/options/samba
> > > > > > >
> > > > > > > OK, you need one further change after adding
the
> > > ypServ30.ldif, you
> > > > > > > need to change this:
> > > > > > >
> > > > > > > server services = rpc, nbt, wrepl, ldap,
cldap, kdc, drepl,
> > > winbind,
> > > > > > > ntp_signd, kcc, dnsupdate, dns, smb
> > > > > > >
> > > > > > > To this:
> > > > > > >
> > > > > > > server services = s3fs, rpc, nbt, wrepl,
ldap, cldap, kdc, drepl,
> > > > > > > winbind, ntp_signd, kcc, dnsupdate, dns
> > > > > > >
> > > > > > > Rowland
> > > > > > >
> > > > > > > --
> > > > > > > To unsubscribe from this list go to the
following URL and read the
> > > > > > > instructions:
https://lists.samba.org/mailman/options/samba
> > > > >
> > > > > OK, you have extended the schema as per the webpage
link I posted, you
> > > > > are now using s3fs instead of ntvfs and have restarted
samba, you
> > > should
> > > > > be able to get users with getent, did you have any
version of samba
> > > > > installed before installing samba4 ? if so you could
have the wrong
> > > > > libnss_winbind files in /lib
> > > > >
> > > > > As to your winbind question, If you are running any
version of samba4
> > > > > that is less than 4.2, winbind is built into the
'samba' daemon. With
> > > > > samba 4.2, the 'samba' daemon starts the
'winbindd' deamon instead.
> > > > >
> > > > > Rowland
> > > > >
> > > > > --
> > > > > To unsubscribe from this list go to the following URL
and read the
> > > > > instructions:
https://lists.samba.org/mailman/options/samba
> > > >
> > > > --
> > > > To unsubscribe from this list go to the following URL and
read the
> > > > instructions: https://lists.samba.org/mailman/options/samba
> > 
> > OK, I get:
> > 
> > /lib/x86_64-linux-gnu/libnss_winbind.so
> > /lib/x86_64-linux-gnu/libnss_winbind.so.2
> > /usr/local/samba/lib/libnss_winbind.so
> > /usr/local/samba/lib/libnss_winbind.so.2
> > /usr/src/samba-4.2.0/bin/default/nsswitch/libnss_winbind.so
> > /usr/src/samba-4.2.0/bin/shared/libnss_winbind.so.2
> > 
> > This is on Debian 7.8 running 4.1.7 from backports *AND* I have also
> > built 4.2.0 but this is not being used.
> > 
> > So, backup these two files:
> > 
> > /lib/x86_64-linux-gnu/libnss_winbind.so
> > /lib/x86_64-linux-gnu/libnss_winbind.so.2
> > 
> > Rename them or move them out of the way, but do not delete them just
in
> > case they are the correct ones :-)
> > 
> > Then copy /usr/local/samba/lib/libnss_winbind.so.2 to
/lib/x86_64-linux-gnu
> > 
> > cp /usr/local/samba/lib/libnss_winbind.so.2 /lib/x86_64-linux-gnu/
> > 
> > create a symbolic link
> > 
> > ln -s /lib/x86_64-linux-gnu/libnss_winbind.so.2
> > /lib/x86_64-linux-gnu/libnss_winbind.so
> > 
> > You will now have the correct winbind files for the samba4 you
compiled
> > yourself
> > 
> > Rowland
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
>  		 	   		  
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

On 23/03/15 00:55, Jhon P wrote:
> It will be necessary to join this PDC to the domain?
Firstly, it is a 'DC' not a 'PDC', there really is no concept of
a
Primary Domain Controller in active directory, other than one of the 
FSMO roles. These FSMO roles are the only differences between DCs , 
other than this, all DCs are the same (or should)

You do not join a DC to the domain unless it is a second (or subsequent) 
DC, when you provision a DC or classicupgrade a PDC, it is automatically 
joined to the domain.
> I did this once and it was not me well and I had to restore the backup.
>
> The samba documentation does not say anything of this.
> Remember this isnt a member server this is the PDC, on samba ACDC doc 
> say this:
>
> "We /*_do not recommend_* using the Domain Controller as a file 
> Server. This is due to issues with the winbind internal to the Domain 
> Controller./"
>
> But I also need to use it because I had no other server to use as a 
> file server.
It is not recommended, but you can do it, there are plenty of people who 
post on here who do use a DC as a fileserver.

Just how many clients do you have and what sort ?

Rowland
>
> If there is no chance you do not want to waste time with this.
>
> Many thank you very much.
>
>
>