[Samba] wbinfo works fine, getent only works for builtin groups

[Robert Fraser]

Hi

I am having a lot of trouble getting users from a trusted domain to access
shares and files.  getent passwd / get group doesn't retrieve domain users
or groups, so I can't set permissions for the users or groups from the
trusted domain

The domain having problems is:
Ubuntu 6.06 Server
Samba Version 3.0.22

The trusted domain is:
Ubuntu 8.04 Server
Samba Version 3.0.28a


wbinfo -u and wbinfo -g work fine and bring up a list of the trusted domain
users and groups

wbinfo --sid-to-name=SID, --authenticate=user%password, -t,
--trusted-domains  all work fine for the local domain and the trusted domain

When I do a getent passwd, I only get the local /etc/passwd users

When I do a getent group, I get the local /etc/group groups, and the
BUILTIN\administrators and BUILTIN\users

After a getent, log.winbind is full of entries like this:



[2008/08/26 00:29:10, 10] nsswitch/winbindd_group.c:winbindd_getgrent(1006)
  SID S-1-5-21-2824201121-3407686785-855272569-3033 not in idmap
[2008/08/26 00:29:10, 1] nsswitch/winbindd_group.c:winbindd_getgrent(1011)
  could not look up gid for group CADUsers
[2008/08/26 00:29:10, 10] nsswitch/winbindd_group.c:winbindd_getgrent(961)
  entry_index = 3, num_entries = 8
[2008/08/26 00:29:10, 10]
nsswitch/idmap_cache.c:idmap_cache_set_negative_sid(258)
  Adding cache entry with key =
IDMAP/SID/S-1-5-21-2824201121-3407686785-855272569-3039; value =
1219667470/IDMAP/NEGATIVE and timeout = Tue Aug 26 00:31:10 200
8 (120 seconds ahead)
[2008/08/26 00:29:10, 10] nsswitch/winbindd_group.c:winbindd_getgrent(1006)
  SID S-1-5-21-2824201121-3407686785-855272569-3039 not in idmap
[2008/08/26 00:29:10, 1] nsswitch/winbindd_group.c:winbindd_getgrent(1011)
  could not look up gid for group dundirectors
[2008/08/26 00:29:10, 10] nsswitch/winbindd_group.c:winbindd_getgrent(961)
  entry_index = 4, num_entries = 8
[2008/08/26 00:29:10, 10]
nsswitch/idmap_cache.c:idmap_cache_set_negative_sid(258)
  Adding cache entry with key =
IDMAP/SID/S-1-5-21-2824201121-3407686785-855272569-513; value =
1219667470/IDMAP/NEGATIVE and timeout = Tue Aug 26 00:31:10 2008
   (120 seconds ahead)
[2008/08/26 00:29:10, 10] nsswitch/winbindd_group.c:winbindd_getgrent(1006)
  SID S-1-5-21-2824201121-3407686785-855272569-513 not in idmap
[2008/08/26 00:29:10, 1] nsswitch/winbindd_group.c:winbindd_getgrent(1011)
  could not look up gid for group Domain Users
[2008/08/26 00:29:10, 10] nsswitch/winbindd_group.c:winbindd_getgrent(961)
  entry_index = 5, num_entries = 8
[2008/08/26 00:29:10, 10]
nsswitch/idmap_cache.c:idmap_cache_set_negative_sid(258)
  Adding cache entry with key =
IDMAP/SID/S-1-5-21-2824201121-3407686785-855272569-3029; value =
1219667470/IDMAP/NEGATIVE and timeout = Tue Aug 26 00:31:10 200
8 (120 seconds ahead)

Can anyone suggest what I can do to fix this?

Thanks for any help
Rob
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] wbinfo works but getent not

[Arno Seidel]

Hi List,

i´ve a strange problem with samba-winbind-3.0.8
and getent passwd.

i think i´ve configured all well because wbinfo -u -g aso.. works fine
but if i want to list the users with getent passwd i get only the local
users
a strace of getent shows me following:

execve(/usr/bin/getent, [getent, passwd], [/* 51 vars */]) = 0
uname({sys=Linux, node=grapefruit, ...}) = 0
brk(0)  = 0x804d000
open(/etc/ld.so.preload, O_RDONLY)= -1 ENOENT (No such file or
directory)
open(/etc/ld.so.cache, O_RDONLY)  = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=67731, ...}) = 0
old_mmap(NULL, 67731, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40014000
close(3)= 0
open(/lib/libc.so.6, O_RDONLY)= 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\360Y\1..., 512) =
512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1333580, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x40025000
old_mmap(NULL, 1133828, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40026000
madvise(0x40026000, 1133828, MADV_SEQUENTIAL|0x1) = 0
old_mmap(0x40131000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x10b000) = 0x40131000
old_mmap(0x40139000, 7428, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40139000
close(3)= 0
munmap(0x40014000, 67731)   = 0
brk(0)  = 0x804d000
brk(0x806e000)  = 0x806e000
brk(0)  = 0x806e000
open(/usr/lib/locale/locale-archive, O_RDONLY|O_LARGEFILE) = -1 ENOENT (No
such file or directory)
open(/usr/share/locale/locale.alias, O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=2528, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x40014000
read(3, # Locale name alias data base.\n#..., 4096) = 2528
read(3, , 4096)   = 0
close(3)= 0
munmap(0x40014000, 4096)= 0
open(/usr/lib/locale/de_DE.UTF-8/LC_CTYPE, O_RDONLY) = -1 ENOENT (No such
file or directory)
open(/usr/lib/locale/de_DE.utf8/LC_CTYPE, O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=238592, ...}) = 0
old_mmap(NULL, 238592, PROT_READ, MAP_PRIVATE, 3, 0) = 0x4013b000
close(3)= 0
open(/usr/lib/gconv/gconv-modules.cache, O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=21436, ...}) = 0
old_mmap(NULL, 21436, PROT_READ, MAP_SHARED, 3, 0) = 0x40176000
close(3)= 0
open(/etc/nsswitch.conf, O_RDONLY)= 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=1290, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x4017c000
read(3, #\n# /etc/nsswitch.conf\n#\n# An ex..., 4096) = 1290
read(3, , 4096)   = 0
close(3)= 0
munmap(0x4017c000, 4096)= 0
open(/etc/ld.so.cache, O_RDONLY)  = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=67731, ...}) = 0
old_mmap(NULL, 67731, PROT_READ, MAP_PRIVATE, 3, 0) = 0x4017c000
close(3)= 0
open(/lib/libnss_compat.so.2, O_RDONLY) = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\260\22..., 512) =
512
fstat64(3, {st_mode=S_IFREG|0755, st_size=32046, ...}) = 0
old_mmap(NULL, 29676, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4018d000
madvise(0x4018d000, 29676, MADV_SEQUENTIAL|0x1) = 0
old_mmap(0x40194000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x6000) = 0x40194000
close(3)= 0
open(/lib/libnsl.so.1, O_RDONLY)  = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240\0..., 512) =
512
fstat64(3, {st_mode=S_IFREG|0755, st_size=87882, ...}) = 0
old_mmap(NULL, 84992, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40195000
madvise(0x40195000, 84992, MADV_SEQUENTIAL|0x1) = 0
old_mmap(0x401a7000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x11000) = 0x401a7000
old_mmap(0x401a8000, 7168, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x401a8000
close(3)= 0
munmap(0x4017c000, 67731)   = 0
open(/etc/ld.so.cache, O_RDONLY)  = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=67731, ...}) = 0
old_mmap(NULL, 67731, PROT_READ, MAP_PRIVATE, 3, 0) = 0x4017c000
close(3)= 0
open(/lib/libnss_nis.so.2, O_RDONLY)  = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\35..., 512) =
512
fstat64(3, {st_mode=S_IFREG|0755, st_size=40877, ...}) = 0
old_mmap(NULL, 36616, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x401aa000
madvise(0x401aa000, 36616, MADV_SEQUENTIAL|0x1) = 0
old_mmap(0x401b2000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3,
0x7000) = 0x401b2000
close(3)= 0
open(/lib/libnss_files.so.2, O_RDONLY) = 3
read(3, \177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\35...,