RE: [Samba] wbinfo -u and -g work, getent passwd works,getent group DOES NOT WORK (solution!)

On 8/4/2008 9:58 AM, Chris Smith wrote:
> The general use for winbind is to be able to use an MS domain controller
> for authentication eliminating the need to separately create
> matching 'nix users.
>
> The special case for using winbind is when, using Samba as the PDC, you
> wish to insist that a username/password pair from a system not a domain
> member is not authenticated even if the username/password pair matches
> that of a domain user (maybe more correctly to state that the domain
> part is missing from the supplied credentials). Note that generally
> with a pure Windows network and a Windows NT4 PDC, as well as Windows
> in general (peer to peer), matching username/password credentials are
> enough to authenticate, so using winbind in this situation creates an
> environment more restrictive then generally expected.

Interesting! Is this behavior documented?

--

Best regards,

Charles
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

On Monday 04 August 2008, Charles Marcus wrote:
> Interesting! Is this behavior documented?

AFAIK, yes.
But it is my interpretation of the documentation (which I believe to be
correct or I wouldn't have posted it) and is therefore offered to not
only simplify and clarify where it can but also to expose it to any
needed corrections by those who read it differently and/or know much
more about the subject than I do.

--
Chris
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba