[Pkg-samba-maint] Bug#491686: closed by Steve Langasek <vorlon at debian.org> (Re: base: the command "groups" doesn't shows local groups using pam_winbind.so authentication module)

[Paolo Sala]

Steve Langasek scrisse in data 28/07/2008 10:05:
> This indicates a failure in the initgroups() call at the beginning of your
> session, which is supposed to retrieve all of the groups from NSS and add
> them to your process.
>
> But this is an example where calling "groups $remoteuser" *does* show the
> local groups.  Is there a particular test case which *reproducibly* fails to
> show the groups for you?  (Not counting running the 'groups' command by
> itself, since this doesn't query group membership information from NSS, it
> only queries group names.)
>   
I don't know, the problem I have is I can't use any software/hardware 
that use group authentication. Perhaps setting on some debug... but I 
don't know how can I do it.

> Please try removing 'wins' from the hosts line as a test.  I don't think it
> will fix everything, but it may fix your last problem.
>   
Ok I'll try.


> Also, do you have 'winbind enum groups' and 'winbind enum users' enabled in
> /etc/samba/smb.conf?  From your description of the problem I suspect that
> you already do, but just in case you don't, I recommend you enable the
> options.
>   
yes of course:
> DOMINIOCSA\psala at psala-lx2:~$ grep winbind\ enum /etc/samba/smb.conf
>    winbind enum groups = true
>    winbind enum users = true
if you need all smb.conf I can send you...

> Beyond that, the symptoms look like NSS is in only *some* cases losing the
> group information from the 'files' backend.  In that case, I guess this is a
> glibc bug
I have to reopen a new bug in glibc or do you think you can forward it 
to glibc BTS?

Thank you very much Steve, indeed!

Have a great day

Piviul