samba - May 2020 - default backend = rid not showing full group information for users

Which Debian version do you use? Because in either version (0 oer 10) in
nsswitch.conf is wirtten "files winbind" in Debian 9 it's
"compat
winbind" and in 10 it's "files systemd winbind" so you
removed (I think)
systemd maybe you should put it back in


Am 01.05.20 um 02:12 schrieb miguel medalha via samba:
>> I am trying to use the backend = rid but it is not showing me group 
>> information of the users after adding the user to the domain groups...
> 
>> root at samba01:~# id jdoe
>> root at samba01:~# id lgaga
> 
> What are your entries for 'passwd' and 'group' in
'/etc/nsswitch.conf'? I
> suppose winbind should be there. In my case:
> 
> passwd:     files winbind
> group:      files winbind
> 
> 
>

On 03/05/2020 11:39, Stefan Kania via samba wrote:
> Which Debian version do you use? Because in either version (0 oer 10) in
> nsswitch.conf is wirtten "files winbind" in Debian 9 it's
"compat
> winbind" and in 10 it's "files systemd winbind" so you
removed (I think)
> systemd maybe you should put it back in
You can use 'files' or 'compat', they both mean virtually the
same
thing, just that the latter gives you access to NIS mappings, something 
you do not need with Samba.

As for 'systemd', not sure what this actually does, but when I am forced
to use systemd (e.g. on my rpi), everything works even though I remove 
'systemd' from the passwd and group lines in nsswitch.conf.

Rowland

On 2020-05-03 12:39, Stefan Kania via samba wrote:
> Which Debian version do you use? Because in either version (0 oer 10) in
> nsswitch.conf is wirtten "files winbind" in Debian 9 it's
"compat
> winbind" and in 10 it's "files systemd winbind" so you
removed (I think)
> systemd maybe you should put it back in
root at samba01:~# dpkg -l winbind samba samba-libs
Desired=Unknown/Install/Remove/Purge/Hold
| 
Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name             Version                Architecture Description
+++-================-======================-============-====================================================================ii
samba            2:4.9.5+dfsg-5+deb10u1 amd64        SMB/CIFS file,
print, and login server for Unix
ii  samba-libs:amd64 2:4.9.5+dfsg-5+deb10u1 amd64        Samba core 
libraries
ii  winbind          2:4.9.5+dfsg-5+deb10u1 amd64        service to 
resolve user and group information from Windows NT servers

root at samba01:~# cat /etc/debian_version
10.3

root at samba01:~# uname -a
Linux samba01 4.19.0-8-amd64 #1 SMP Debian 4.19.98-1+deb10u1 
(2020-04-27) x86_64 GNU/Linux

root at samba01:~# cat /etc/nsswitch.conf  | grep winbind
passwd:         files systemd winbind
group:          files systemd winbind

root at samba01:~# wbinfo --group-info=office
office:x:11106:jdoe,lgaga
root at samba01:~# id jdoe
uid=11157(jdoe) gid=10513(domain users) groups=10513(domain 
users),11157(jdoe),3001(BUILTIN\users)

On 04/05/2020 12:59, Jelle de Jong via samba wrote:
>
> root at samba01:~# cat /etc/nsswitch.conf? | grep winbind
> passwd:???????? files systemd winbind
> group:????????? files systemd winbind
OK, the only computer I have that runs systemd, is my Rpi4 running 
Raspbian, which is basically Buster compiled for ARM.

I have in /etc/nsswitch.conf:

passwd:???????? files winbind
group:????????? files winbind

And everything works as expected, so try removing the 'systemd' from the
passwd & group lines.

Also have you considered using Louis's repo: http://apt.van-belle.nl/

This will get you a much later version of Samba.

Rowland

Sunday 3 maj 2020 kl. 13:14:24 CEST,  Rowland penny via samba
wrote:
> As for 'systemd', not sure what this actually does, but when I am
forced
> to use systemd (e.g. on my rpi), everything works even though I remove
> 'systemd' from the passwd and group lines in nsswitch.conf.
The systemd NSS module handles dynamically allocated users and groups when a 
unit has DynamicUser=true. See systemd.exec(5).

-- 
Magnus Holmgren        holmgren at lysator.liu.se