All looks fine, but did you reboot after changing nsswitch.conf? When I was testing both winbind and ldap nsswitch, I found that the mechanism caches lookups, so changes to the config weren't always recognized. It would work, not work, work, etc., and it drove me crazy till I found out about the nscd daemons.
I'm not sure this is your problem, but it sounds a lot like what I saw, so I thought I'd ask. > -----Original Message----- > From: Sean Patrick Ingles [mailto:ingless@;visionsys.com] > Sent: Monday, November 04, 2002 10:19 AM > To: Hall, Ken (ECSS); [EMAIL PROTECTED] > Subject: RE: [Samba] getent not working correctly > > > Here is my /etc/nsswitch.conf (abbreviated): > > passwd: files winbind > shadow: files winbind > group: files winbind > > I first start smbd -D and nmbd -D > > Then I start winbindd > > Then I join the domain (smbpasswd -j DOMAIN -r > DOMAINCONTROLLER -U Administrator) It works > > Then I check my Secret (wbinfo -t) and it's good > > Then I list users and groups (wbinfo -u and wbinfo -g) and it > works fine > > However I still cannot get "getent passwd" and "getent group" working. > > I am 100% stumped > > -SP > > -----Original Message----- > From: Hall, Ken (ECSS) [mailto:KeHall@;exchange.ml.com] > Sent: Friday, November 01, 2002 12:55 PM > To: [EMAIL PROTECTED] > Subject: RE: [Samba] getent not working correctly > > > Did you reboot after starting winbindd? > > Either do that, or try looking for the nameserver cache > daemons (nscd), and kill them all. (Don't worry, they'll restart.) > > I had the same problem with nss_ldap, and it drove me NUTS > till I found out about the cache mechanism. > > > -----Original Message----- > > From: Noel Kelly [mailto:nkelly@;citrusnetworks.net] > > Sent: Friday, November 01, 2002 12:46 PM > > To: 'Sean Patrick Ingles'; [EMAIL PROTECTED] > > Subject: RE: [Samba] getent not working correctly > > > > > > You need getent to work. This is really how Unix actually does the > > authenticating - winbind is just the conduit to the M$ database. > > > > Have you edited your /etc/nsswitch.conf correctly? You need: > > > > passwd: files winbind nisplus > > shadow: files winbind nisplus > > group: files winbind nisplus > > > > This will make Unix call winbind when looking for > > users/groups (this the > > mechanism that getent passwd/group runs). > > > > HTH, > > Noel > > > > > > -----Original Message----- > > From: Sean Patrick Ingles [mailto:ingless@;visionsys.com] > > Sent: 01 November 2002 15:41 > > To: [EMAIL PROTECTED] > > Subject: [Samba] getent not working correctly > > > > > > Hello again! > > > > Ok, I've gotten wbinfo -u and wbinfo -g working great > > > > Now I try to run getent passwd and getent group I get my > > local users/groups > > but not the ones on the Windows 2k Server Domain Controller > > and it just > > hangs after listing the local ones. > > > > I also tried authenticating a user and it worked I'm assuming > > > > wbinfo -a DOMAIN+ingless@DOMAIN%"password" (The usernames here have > > user@domain due to some M$ Active-Directory thing...) plaintext > > password authentication succeeded challenge/response password > > authentication failed > > Could not authenticate user DOMAIN+ingless@DOMAIN%"password" with > > challenge/response > > > > Do I need getent working, or is it safe to assume everything > > is functioning > > normally now? > > > > Thanks! > > > > -SP > > > > =========================================================== > > > > \ / ____/ / Sean Patrick Ingles > > \ / / / Jr. Network Engineer > > \ / ___ / / > > \ / / / Vision Systems, Inc. > > __/ ____/ _/ 142 State Street > > Albany, NY 12207 > > www.visionsys.com Landline: +1 518.434.4300 x1406 > > [EMAIL PROTECTED] Fax: +1 518.434.4304 > > > > ========================================================== > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > --- > > Incoming mail is certified Virus Free. > > Checked by AVG anti-virus system (http://www.grisoft.com). > > Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 > > > > > > --- > > Outgoing mail is certified Virus Free. > > Checked by AVG anti-virus system (http://www.grisoft.com). > > Version: 6.0.408 / Virus Database: 230 - Release Date: 24/10/2002 > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba