Something is not right with the group mapping, but I am unsure what. getent returns different a primary GID for a given user on each box and the group mapping differs in each case:
Box A: //u...@host//:~$ getent group 10012 OURDOMAIN\domain users:*:10012: Box B: //u...@host//:~$ getent group 10004 OURDOMAIN\domain users:*:10004: When I do a long file listing winbindd is printing stuff like this: [14855]: getpwuid 10082 Added timed event "async_request_timeout": 2ae2266d45b0 child daemon request 51 timed_events_timeout: 299/999987 process_request: request fn DUAL_UID2SID [14254]: uid to sid 10082 uid = [10082] Cache entry with key = IDMAP/UID/10082 couldn't be found Query backends to map ids->sids Query sids from domain OURDOMAIN Fetching record UID 10082 Record UID 10082 not found Query sids from domain SAMBASERVER pdb_default_uid_to_rid: host has no idea of uid 10082 Storing response for pid 14257, len 3240 Destroying timed event 2ae2266d45b0 "async_request_timeout" Retrieving response for pid 14257 uid2sid_recv: uid 10082 has sid S-1-22-1-10082 Could not find domain for sid S-1-22-1-10082 Ben Tisdall wrote: > Hi all, > > I have an odd situation on my hands: > > * Two CentOS 5.2 boxes both joined to an AD domain. > > * Same samba version (3.0.28-1.el5_2.1) smb.conf, only the netbios names > differ > > * Can enumerate users and groups using winbind -{u,g} on both. > > * nss doesn't enumerate users & groups on one (same lib versions, same > conf file). > > //ben...@testukmcsstor1//:~$ rpm -qa | grep nss- > nss-tools-3.12.2.0-2.el5.centos > nss-3.12.2.0-2.el5.centos > pkinit-nss-0.7.3-1.el5 > nss-3.12.2.0-2.el5.centos > > Looks like this may be more of a libnss problem than a samba one, but > can anyone suggest how I can start to troubleshoot? > > Thanks in advance, > > Ben Tisdall > > > > > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba