[Pkg-samba-maint] Bug#491686: closed by Steve Langasek <vorlon at debian.org> (Re: base: the command "groups" doesn't shows local groups using pam_winbind.so authentication module)
piviul at riminilug.it
Tue Jul 29 06:54:07 UTC 2008
Steve Langasek scrisse in data 28/07/2008 10:05:
> This indicates a failure in the initgroups() call at the beginning of your
> session, which is supposed to retrieve all of the groups from NSS and add
> them to your process.
> But this is an example where calling "groups $remoteuser" *does* show the
> local groups. Is there a particular test case which *reproducibly* fails to
> show the groups for you? (Not counting running the 'groups' command by
> itself, since this doesn't query group membership information from NSS, it
> only queries group names.)
I don't know, the problem I have is I can't use any software/hardware
that use group authentication. Perhaps setting on some debug... but I
don't know how can I do it.
> Please try removing 'wins' from the hosts line as a test. I don't think it
> will fix everything, but it may fix your last problem.
Ok I'll try.
> Also, do you have 'winbind enum groups' and 'winbind enum users' enabled in
> /etc/samba/smb.conf? From your description of the problem I suspect that
> you already do, but just in case you don't, I recommend you enable the
yes of course:
> DOMINIOCSA\psala at psala-lx2:~$ grep winbind\ enum /etc/samba/smb.conf
> winbind enum groups = true
> winbind enum users = true
if you need all smb.conf I can send you...
> Beyond that, the symptoms look like NSS is in only *some* cases losing the
> group information from the 'files' backend. In that case, I guess this is a
> glibc bug
I have to reopen a new bug in glibc or do you think you can forward it
to glibc BTS?
Thank you very much Steve, indeed!
Have a great day
More information about the Pkg-samba-maint