winbind expand groups = 1
should do it. I had to set it back to 0 though after finding how much it
slowed things down.
_Gary
On Fri, Oct 20, 2017 at 7:53 AM, Andreas Hauffe via samba <
samba at lists.samba.org> wrote:
> Hi,
>
> I'm having trouble to let "getent group" show the members of
the group.
> The command is just listing the group name and gid but no members. So does
> "wbinfo --group-info". Is there some trick to do? "getent
passwd" shows
> correct group memberships.
>
>
> smb.conf
>
> [global]
>
> netbios name = hostname
> security = ADS
> workgroup = D1
> realm = D1.D2.EXAMPLE.DOM
> dedicated keytab file = /etc/krb5.keytab
> kerberos method = secrets and keytab
>
> template homedir = /home/%U
> template shell = /bin/bash
>
> winbind use default domain = yes
> winbind enum users = yes
> winbind enum groups = yes
> winbind refresh tickets = yes
>
> idmap config * : backend = tdb
> idmap config * : range = 3000-9999
> idmap config D1 : backend = rid
> idmap config D1 : range = 1000000-2000000
> idmap config D2 : backend = rid
> idmap config D2 : range = 3000000-4000000
>
> nsswitch.conf
>
> passwd: compat winbind
> group: compat winbind
>
> hosts: files mdns_minimal [NOTFOUND=return] dns
> networks: files dns
>
> services: files
> protocols: files
> rpc: files
> ethers: files
> netmasks: files
> netgroup: files nis
> publickey: files
>
> bootparams: files
> automount: files nis
> aliases: files
>
> --
> Regards Andreas
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>