On 04/15/2013 03:15 PM, Dmitri Pal wrote:
On 04/14/2013 10:42 PM, steve wrote:
> 1.9.4 on openSUSE 12.3 with Samba4 AD
> Hi
> Everything is fine apart from that we'd like for getent passwd to
> throw out all users. At the moment it only returns single user
> information and even then only if we specify the user:
>
> getent passwd
> <loadsa local users>
> <nothing from AD>
>
> but:
>
> getent passwd steve2
> steve2:*:3000034:20513:steve2:/home/users/steve2:/bin/bash
>
> We've tried enumerate = TRUE an waited for 30 minute on a test domain
> with only 2 users and 2 groups but still getent passwd returns a blank
> for domain users.
>
> Everything else is fine. Authentication, group membership. . . Any
> ideas on the getent?
> Cheers, Steve
> (This is my first post here and I've only had time for a quick look
> through the archive so please accept my apologies if this is OT.)
>
> /etc/nsswitch.conf
> passwd: compat sss
> group: compat sss
This does not seem right.
Why do you need compat?
The man page indicates that "compat" can't be used with anything else.
http://www.daemon-systems.org/man/nsswitch.conf.5.html
May be you mean:
files sss
If you need all users to be returned you would need to turn on
enumeration, however why is it really needed? Do you have any scripts or
apps that rely on the full list of users to be available? If not I
suggest you turn the enumeration off.
Hi
Sorry. Yes, in desperation, we've tried all of 'files sss', 'compat
sss'
and just plain 'sss'.
We run a Samba 4 AD and yes we have scripts which use getent passwd.
These are mainly wrappers around samba-tool, their cli config tool.
Steve