samba - Feb 2022 - getent not returning users/groups

Dang
It wasn't the library.
?
So, details:
Ubuntu 20.04 on the domain member, with 4.15.5 from Louis' repo.
(DC's are a mix of Ubuntu (2) 18.04 and (1) 20.04 - the 18.04's are
running the distro Samba and the 20.04 is running Louis' Samba package.)
?
smb.conf on member
?
---
SERVER ROLE = MEMBER SERVER
workgroup = AD
server string = FileServer
SECURITY = ADS
REALM = AD.SOMEDOMAIN.LOCAL
idmap config * : backend = tdb
idmap config * : range 3000-7999
idmap config AD : backend = rid
idmap config AD : range = 10000-999999
username map = /etc/samba/user.map
winbind enum users = yes
winbind enum groups = yes
passdb backend = tdbsam
wins support = yes
dns proxy = yes
[test-share]
? comment = Test-share
? path = /abc-01/ad-shared-folders/shared-files/test-share
?? writable = yes
---

?
> On Thu, 2022-02-24 at 17:02 -0800, Greg Sloop <gregs--- via samba
> wrote:
>> wbinfo -u
>> or
>> wbinfo -g
>> return users and groups from the AD (this is run from the member
>> server)
> This shows that AD is working.
>> But getent group/passwd doesn't return any of the groups/users in
AD.
>> More specific queries for a single user or group returns nothing -
>> but no
>> error either.
> This shows that you have something configured incorrectly or that you
> haven't installed the winbind nss links. A bit more info would help,
> what distro, what packages have you installed, what is the DC and
> finally please post your smb.conf from the Unix domain member.
> Rowland



--?
Gregory Sloop, Principal: Sloop Network & Computer Consulting
Voice: 503.251.0452 x121
EMail:?gregs at sloop.net
http://www.sloop.net
---

On Fri, 2022-02-25 at 08:33 -0800, Gregory Sloop via samba
wrote:
> Dang
> It wasn't the library.
>  
> So, details:
> Ubuntu 20.04 on the domain member, with 4.15.5 from Louis' repo.
> (DC's are a mix of Ubuntu (2) 18.04 and (1) 20.04 - the 18.04's are
> running the distro Samba and the 20.04 is running Louis' Samba
> package.)
>  
> smb.conf on member
>  
> ---
> SERVER ROLE = MEMBER SERVER
> workgroup = AD
> server string = FileServer
> SECURITY = ADS
> REALM = AD.SOMEDOMAIN.LOCAL
> idmap config * : backend = tdb
> idmap config * : range 3000-7999
> idmap config AD : backend = rid
> idmap config AD : range = 10000-999999
> username map = /etc/samba/user.map
> winbind enum users = yes
> winbind enum groups = yes
> passdb backend = tdbsam
> wins support = yes
> dns proxy = yes
This is AD, so why are you running a wins server on your Unix domain
member (wins support = yes) ? also I suggest you change 'dns proxy yes'
to 'dns proxy = no'.
Apart from that, there doesn't seem to be anything wrong, so is there a
firewall getting in the way ?

Rowland