similar to: group members

Hi, In my environment I have windows ads domain with 180k users. I use Samba 3.5.4 and I noticed that not always all users are returned when I use getent command (sometimes it is half of whole list, sometimes this list is empty). Anybody has similar problem? -- View this message in context: http://old.nabble.com/getent-and-a-lot-of-users-tp29449147p29449147.html Sent from the Samba - General

Hello all! Is it possible, using winbind (wbinfo, nss_winbind, etc) to enumare the members of an ADS group, with something other than the "id" command for each user, or "getent group"? The "id" works but then I'd have to enumerate ALL users and build the meber list from there (too slow), whereas "getent group" will only list those members of a

When I do "getent group", I want to see the group's members enumerated. With nss_ldap they are; with nss_winbind they aren't: root at gumbo:~# getent group mgmt PI\mgmt:*:1040: There *are* members there (partially redacted): root at gumbo:~# ldbsearch -Htdb:///var/lib/samba/private/sam.ldb cn=mgmt member # record 1 dn: CN=mgmt,CN=Users,REDACTED member:

So I made the primary group for the testuser account be smbgrp, and it's gidNumber is 30124. Still nothing. "getent passwd testuser" returns nothing unless testuser is in the local passwd file, and then it returns the attributes that are in the passwd file, not the AD system. Some time ago I put together a configuration that uses Linux SSSD to communicate with AD. That allows

I have a Server, that joined an ADS. But we use multiple domains. My Server S is Member of the domain A. Now a wbinfo -u gives me all users in all domains, and wbinfo -g gives me all groups in all domains, as expected. Now I have an ADS-group G that has members of domain A. > getent group G gives me the correct listing with the members. However, when I add a Member of another Domain A'

Hi, For small lab environment I want to use GlusterFS with only ONE node. After some time I would like to add the second node as the redundant node (replica). Is it possible in GlusterFS 3.1 without downtime? Cheers PK

We have a cross platform environment with a Windows 2008 server running Active Directory and many of our workstations are running ubuntu 10.10 using winbind for user authentication. The version of samba running on these boxes is 3.5.4 We are looking to upgrade to Ubuntu 12.04 which runs samba 3.6.3 I am able to connect to the DC, and am able to see the users running the wbinfo -u command, but

Hello list Is there a way to have wbinfo or getent list all the members of an AD group from my domain member? Thanks, Rob ---------------------------------------------------------------------- This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information. No one else may read, print, store, copy, forward or

On 2/14/25 15:01, Rowland Penny via samba wrote: > On Fri, 14 Feb 2025 12:14:18 -0500 > "John R. Graham via samba"<samba at lists.samba.org> wrote: > On 2/14/25 11:22, Rowland Penny via samba wrote: >> So, for an undiagnosed reason, the effective domain membership does >> not include "domain admins" either. >> >> - John > OK, I will

Hi, I've been running a samba server with winbind (CentOS 7) as a member of an AD Domain (Windows 2012 R2) for several months without a problem. "Suddenly" I'm seeing the problem that the membership in newly created AD groups isn't correctly visible for some users on the samba server or only after some indefinite amount of time. I'm looking simply at the output of

On Fri, 14 Feb 2025 12:14:18 -0500 "John R. Graham via samba" <samba at lists.samba.org> wrote: > On 2/14/25 11:22, Rowland Penny via samba wrote: > > Well yes, you can do it that way, but there is an easier way. > > There is a group in AD called 'Domain Admins' > > Add any AD users that you want to be domain administrators to that > > group,

On Tue, 2025-01-21 at 20:20 +0000, Rowland Penny via samba wrote: > On Tue, 21 Jan 2025 21:10:31 +0100 > PaLi via samba <samba at lists.samba.org> wrote: > > > Hello > > > > Thank for suggestion to config fixes. Back to my original question. > > > > Is it possible make > > > > getent group > > > > working on Samba 4 DC >

No joy. I added winbind to the passwd, shadow, and group lines and it is still not working. I also switched back to ad instead of rid (I deleted the Samba database files in /var/lib/samba and rejoined the domain when I switched), and still the same. If the account exists locally I can authenticate against AD and map the share. No local account and it fails. -Mark

On 2/14/25 11:22, Rowland Penny via samba wrote: > Well yes, you can do it that way, but there is an easier way. > There is a group in AD called 'Domain Admins' > Add any AD users that you want to be domain administrators to that > group, then, using visudo add this line to the sudo config: > > %SAMDOM\\domain\ admins ALL=(ALL:ALL) ALL > > Where 'SAMDOM' is

On Tue, 21 Jan 2025 21:10:31 +0100 PaLi via samba <samba at lists.samba.org> wrote: > Hello > > Thank for suggestion to config fixes. Back to my original question. > > Is it possible make > > getent group > > working on Samba 4 DC Yes, but why ? It isn't required for Samba to work, use 'getent group GROUPNAME' instead. > to return list of

The only way it seems to work is if I do have both the local and AD user with the same name. But my goal here is to not require that, to have the AD account only. I have applied Unix attributes to the users. testuser uidNumber = 30089 and gidNumber = 100. However, when I try to query with wbinfo, I was unable to look that up: wbinfo -i "DEVELOPMENT\testuser" failed to call

Dear Support-Team, i have a problem regarding the function of winbind on a samba4 Active Directory Domain Controller. I installed samba4 from the standard debian sources. Made the domain provisioning and installed Kerberos. After that I installed winbind and linked the libnss_winbind.so.2 -> libnss_winbind.so. Wbinfo -u and wbinfo -g do work properly. The strange thing is, that

On Wed, 5 Oct 2016 12:04:53 +0200 mathias dufresne via samba <samba at lists.samba.org> wrote: > I just tested on some DC running also 4.4.5 and "getent group > my_group" does not show groups content. > > I read here > http://serverfault.com/questions/625416/samba-4-group-members-not-shown-in-getent-group > a proposal to use samba-tool as a replacement but

On 20/07/16 08:22, Timo Dachs-Wegmann wrote: > Okay, i tried to install the server without winbind but with libnss-winbind. > > Still the same problem. Getent passwd administrator works but the result of getent passwd only shows local users. > This seems to be the same bug as achims. > We are running a Debian 4.8 with samba 4.2 packages... > > A few months ago I installed a

On 20/07/16 11:49, Achim Gottinger wrote: > > > Am 20.07.2016 um 11:33 schrieb Rowland penny: >> On 20/07/16 08:22, Timo Dachs-Wegmann wrote: >>> Okay, i tried to install the server without winbind but with >>> libnss-winbind. >>> >>> Still the same problem. Getent passwd administrator works but the >>> result of getent passwd only