search for: nss_updatedb

Is there anything like "nss_updatedb" [1] for ldapsam account information backend? nss_updatedb caches unix account information, so it is available even when the LDAP directory isn't available But ldapsam stores additional account information. How can I cache this additional account information, so it is also available e...

...org/LDAP/NSS#Offline_caching_of_NSS_with_nscd > > have to be used? Thanks. > No, you cannot use winbind with nscd, winbind has its own cache. Ah! Citing links without opening it... evidently Debian wiki page get changed. I was speaking about nss-updatedb, sorry. https://www.padl.com/OSS/nss_updatedb.html Anyway... i know about winbind cache, but i suppose is non-permanent (eg, if i shutdown the system, cache get lost). There's some way to have 'permanend winbind cache', or someone have some positive feedback about winbind/permament offline cache systems like nss_updatedb? Tha...

...ing_of_NSS_with_nscd >>> have to be used? Thanks. >> No, you cannot use winbind with nscd, winbind has its own cache. > Ah! Citing links without opening it... evidently Debian wiki page get > changed. I was speaking about nss-updatedb, sorry. > > https://www.padl.com/OSS/nss_updatedb.html > > > Anyway... i know about winbind cache, but i suppose is non-permanent > (eg, if i shutdown the system, cache get lost). Yes, somebody moved the cache to a different directory and it now gets wiped every time Samba is restarted, we have a bug report for it:? https://bugzilla....

...ypeReference#filebucket suggests that I''m not on the right track. Can anyone suggest of the right way to use filebucket to do this, or if there is something else I should be reading up on. My end goal for this is to build a /var/lib/misc/passwd.db and group.db on the puppet master (using nss_updatedb, from ldap), and then push out those .db files to the puppet clients. Thanks! -- +-Geoff Crompton +--Debian System Administrator +---Trinity College --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet User...

I'm revising some docs, and i've returned on the 'offline logon' tema. Looking at: https://wiki.samba.org/index.php/PAM_Offline_Authentication and smb.conf manpage, it is clear that 'offline logon' is a pam/authentication only, does not involve NSS. Considering a 'full offline' DM client (supposing a portable), there's a 'winbind permanent nss

On Fri, 25 Jan 2019 16:32:56 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! L.P.H. van Belle via samba > In chel di` si favelave... > > I come back in this thread, sorry. > > > Maybe https://wiki.debian.org/LDAP/NSS is a better solution for > > the mailserver. > > Probably better use directly LDAP info with native MTA tools

...here suggest not to use winbind and nscd togeter( https://wiki.samba.org/index.php/Samba_Member_Server_Troubleshooting «You should also ensure that nscd is not installed, it will interfere with winbind.») There's a more general approach, really offline (nssl_updatedb, https://www.padl.com/OSS/nss_updatedb.html) but seems overkilled here. I think that, to be effective, winbind have to be some sort of 'NSS cache', and seems to me this is not. 'nscd' can provide simple and effective NSS cache, but 'interfere with winbind'. Andrew (or other samba developers...), can you give...

...nistrador Retrieve winbind data!! Even more weirdest! zaphod:/etc/samba# id igormorgado uid=10000(igormorgado) gid=10000(Domain Users) grupos=10000(Domain Users) it list only the my primary group not all groups but as you could notice i'm on admins group too. More data: zaphod:/etc/samba# nss_updatedb winbind Failed to enumerate nameservice: Success passwd... nameservice unavailable. I have tried to remove winbind cache file (as ||cw told me on irc channel) but didn't helped. There is no pam configuration about winbind this is because I didn't need unix authenticating on winbind or any...

A question for the best winbind SID-UID/GID mapping in our situation: I'm building a new infrastructure with Windows 2003SP1 ADS Domaincontrollers and some Debian Servers (File: Samba+NFS; Mail; Web; ....) and varios XP and Debian Clients. After reading Chapter 12. (Identity Mapping) in the Samba-HOWTO is IDMAP_RID in couple with winbind an easy way to solve the problem with syncr.

...winbind.») Not entirely true that you cannot run nscd with winbind, you just have to stop nscd caching everything that winbind does and by the time you do that, there isn't much left. > > There's a more general approach, really offline (nssl_updatedb, > https://www.padl.com/OSS/nss_updatedb.html) but seems overkilled here. Well, mainly because that will do what winbind is already doing. > > I think that, to be effective, winbind have to be some sort of 'NSS > cache', and seems to me this is not. > 'nscd' can provide simple and effective NSS cache, but ...