[SSSD] getent returns only single users

steve steve at steve-ss.com
Mon Apr 15 15:14:11 UTC 2013


On 04/15/2013 03:15 PM, Dmitri Pal wrote:
> On 04/14/2013 10:42 PM, steve wrote:
>> 1.9.4 on openSUSE 12.3 with Samba4 AD
>> Hi
>> Everything is fine apart from that we'd like for getent passwd to
>> throw out all users. At the moment it only returns single user
>> information and even then only if we specify the user:
>>
>> getent passwd
>> <loadsa local users>
>> <nothing from AD>
>>
>> but:
>>
>> getent passwd steve2
>> steve2:*:3000034:20513:steve2:/home/users/steve2:/bin/bash
>>
>> We've tried enumerate = TRUE an waited for 30 minute on a test domain
>> with only 2 users and 2 groups but still getent passwd returns a blank
>> for domain users.
>>
>> Everything else is fine. Authentication, group membership. . . Any
>> ideas on the getent?
>> Cheers, Steve
>> (This is my first post here and I've only had time for a quick look
>> through the archive so please accept my apologies if this is OT.)
>>
>> /etc/nsswitch.conf
>> passwd: compat sss
>> group:  compat sss
>
> This does not seem right.
> Why do you need compat?
> The man page indicates that "compat" can't be used with anything else.
> http://www.daemon-systems.org/man/nsswitch.conf.5.html
> May be you mean:
> files sss
>
> If you need all users to be returned you would need to turn on
> enumeration, however why is it really needed? Do you have any scripts or
> apps that rely on the full list of users to be available? If not I
> suggest you turn the enumeration off.
>
>
Hi

Sorry. Yes, in desperation, we've tried all of 'files sss', 'compat sss' 
and just plain 'sss'.
We run a Samba 4 AD and yes we have scripts which use getent passwd. 
These are mainly wrappers around samba-tool, their cli config tool.
Steve




More information about the sssd-devel mailing list