samba - Feb 2022 - getent not returning users/groups

All groups and all users must have GID and UID entries if they show up in the
passwd / groups nss list.

Please ensure that at least the user's unix UID and primary group unix Group
ID are set via some method.

There probably should be a wiki page dedicated to just this issue.

PS: Sorry Greg, I was busy when I wrote this and hit Reply to All, which sent it
directly to you rather than the list which was what I assumed a message from the
list would go back to by default.
> -----Original Message-----
> From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of
> Gregory Sloop via samba
> Sent: Friday, February 25, 2022 2:57 PM
> To: Christopher Cox via samba
> Subject: Re: [Samba] getent not returning users/groups
> 
> Already there, and still fails with specific getent searches (for a
particular user
> or group.)
> 
> Thanks tho.
> 
> 
> > On 2/24/22 19:02, Greg Sloop <gregs--- via samba wrote:
> 
> >> wbinfo -u
> >> or
> >> wbinfo -g
> >> return users and groups from the AD (this is run from the member
server)
> 
> >>> But getent group/passwd doesn't return any of the
groups/users in AD.
> >> More specific queries for a single user or group returns nothing -
but no
> >> error either.
> 
> >>> nsswitch.conf contains
> >> ---
> >> passwd:         compat winbind systemd
> >> group:          compat winbind systemd
> 
> > Try adding the following to your smb.conf (global):
> 
> >          winbind enum users = yes
> >          winbind enum groups = yes
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

On Fri, 2022-02-25 at 17:01 -0800, Michael Evans via samba
wrote:
> All groups and all users must have GID and UID entries if they show
> up in the passwd / groups nss list.
Only if you are using the winbind 'ad' idmap backend, which Gregory
isn't.
> 
> Please ensure that at least the user's unix UID and primary group
> unix Group ID are set via some method.
Why ?
> 
> There probably should be a wiki page dedicated to just this issue.
There is.

Also, the 'enum' lines are only required for troubleshooting purposes
(such as this) and shouldn't be in a production smb.conf.

Rowland