similar to: group members

Hi, In my environment I have windows ads domain with 180k users. I use Samba 3.5.4 and I noticed that not always all users are returned when I use getent command (sometimes it is half of whole list, sometimes this list is empty). Anybody has similar problem? -- View this message in context: http://old.nabble.com/getent-and-a-lot-of-users-tp29449147p29449147.html Sent from the Samba - General

Hello all! Is it possible, using winbind (wbinfo, nss_winbind, etc) to enumare the members of an ADS group, with something other than the "id" command for each user, or "getent group"? The "id" works but then I'd have to enumerate ALL users and build the meber list from there (too slow), whereas "getent group" will only list those members of a

When I do "getent group", I want to see the group's members enumerated. With nss_ldap they are; with nss_winbind they aren't: root at gumbo:~# getent group mgmt PI\mgmt:*:1040: There *are* members there (partially redacted): root at gumbo:~# ldbsearch -Htdb:///var/lib/samba/private/sam.ldb cn=mgmt member # record 1 dn: CN=mgmt,CN=Users,REDACTED member:

So I made the primary group for the testuser account be smbgrp, and it's gidNumber is 30124. Still nothing. "getent passwd testuser" returns nothing unless testuser is in the local passwd file, and then it returns the attributes that are in the passwd file, not the AD system. Some time ago I put together a configuration that uses Linux SSSD to communicate with AD. That allows

I have a Server, that joined an ADS. But we use multiple domains. My Server S is Member of the domain A. Now a wbinfo -u gives me all users in all domains, and wbinfo -g gives me all groups in all domains, as expected. Now I have an ADS-group G that has members of domain A. > getent group G gives me the correct listing with the members. However, when I add a Member of another Domain A'

Hi, For small lab environment I want to use GlusterFS with only ONE node. After some time I would like to add the second node as the redundant node (replica). Is it possible in GlusterFS 3.1 without downtime? Cheers PK

Hello list Is there a way to have wbinfo or getent list all the members of an AD group from my domain member? Thanks, Rob ---------------------------------------------------------------------- This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information. No one else may read, print, store, copy, forward or

We have a cross platform environment with a Windows 2008 server running Active Directory and many of our workstations are running ubuntu 10.10 using winbind for user authentication. The version of samba running on these boxes is 3.5.4 We are looking to upgrade to Ubuntu 12.04 which runs samba 3.6.3 I am able to connect to the DC, and am able to see the users running the wbinfo -u command, but

Hi, I've been running a samba server with winbind (CentOS 7) as a member of an AD Domain (Windows 2012 R2) for several months without a problem. "Suddenly" I'm seeing the problem that the membership in newly created AD groups isn't correctly visible for some users on the samba server or only after some indefinite amount of time. I'm looking simply at the output of

No joy. I added winbind to the passwd, shadow, and group lines and it is still not working. I also switched back to ad instead of rid (I deleted the Samba database files in /var/lib/samba and rejoined the domain when I switched), and still the same. If the account exists locally I can authenticate against AD and map the share. No local account and it fails. -Mark

The only way it seems to work is if I do have both the local and AD user with the same name. But my goal here is to not require that, to have the AD account only. I have applied Unix attributes to the users. testuser uidNumber = 30089 and gidNumber = 100. However, when I try to query with wbinfo, I was unable to look that up: wbinfo -i "DEVELOPMENT\testuser" failed to call

Dear Support-Team, i have a problem regarding the function of winbind on a samba4 Active Directory Domain Controller. I installed samba4 from the standard debian sources. Made the domain provisioning and installed Kerberos. After that I installed winbind and linked the libnss_winbind.so.2 -> libnss_winbind.so. Wbinfo -u and wbinfo -g do work properly. The strange thing is, that

On Wed, 5 Oct 2016 12:04:53 +0200 mathias dufresne via samba <samba at lists.samba.org> wrote: > I just tested on some DC running also 4.4.5 and "getent group > my_group" does not show groups content. > > I read here > http://serverfault.com/questions/625416/samba-4-group-members-not-shown-in-getent-group > a proposal to use samba-tool as a replacement but

On 20/07/16 08:22, Timo Dachs-Wegmann wrote: > Okay, i tried to install the server without winbind but with libnss-winbind. > > Still the same problem. Getent passwd administrator works but the result of getent passwd only shows local users. > This seems to be the same bug as achims. > We are running a Debian 4.8 with samba 4.2 packages... > > A few months ago I installed a

On 20/07/16 11:49, Achim Gottinger wrote: > > > Am 20.07.2016 um 11:33 schrieb Rowland penny: >> On 20/07/16 08:22, Timo Dachs-Wegmann wrote: >>> Okay, i tried to install the server without winbind but with >>> libnss-winbind. >>> >>> Still the same problem. Getent passwd administrator works but the >>> result of getent passwd only

Hi, I'm having trouble to let "getent group" show the members of the group. The command is just listing the group name and gid but no members. So does "wbinfo --group-info". Is there some trick to do? "getent passwd" shows correct group memberships. smb.conf [global]     netbios name = hostname     security = ADS     workgroup = D1     realm =

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Well, I think this is not the only time you guys ever seen that kind of mails. First of all, I did checked all that is to be checked before writing to list. wbinfo -u and wbinfo -g work flawless. Also wbinfo -a, so I can authenticate without problems. The setup is a normal trust setup where domain X (my domain) trusts domain Y (another company).

Hello List, I'm running a Samba ADS on Debian 9, Samba version 4.5.12-Debian. Right now I'll try to add a Domain member - also running Samba version 4.5.12-Debian. Thanks to Loius and Rowland, this howto guided me a lot in the right direction: https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member But right now I'll get stuck. It seems that the configuration is ok -

Hello list. The issue I have is that with the changes made to the idmap functionality of winbind, as regards the enumeration of rfc2307 users and groups using getent passwd and getent group, only those AD users that are not in the domains included in the "idmap config (domain)" statements (the ones in trusted domains that get their ID mappings auto-assigned by the TDB backend with

Hi all, With Samba 4.4.5, on member servers (I did not tried yet on DCs), using "getent group" with or without specifying a group name groups are shown but they are shown as empty groups, no user name is displayed. Is there a way to make them displayed? Cheers, Mathias