ClearFoundation Tracker - ClearCenter
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0000468ClearCenterapp-active-directory - Active Directory Connectorpublic2012-03-09 12:452013-04-10 09:07
Reporteruser2 
Assigned To 
PrioritynormalSeverityminorReproducibilityrandom
StatusconfirmedResolutionopen 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version 
Summary0000468: Weird behavior in getent leads to missing full name when retrieving user info
DescriptionThe following strange behavior occurred on a test system connected to Active Directory:

# getent passwd win9
win9:*:20000013:20000002::/home/win9:/sbin/nologin

# getent passwd | grep win9
win9:*:20000013:20000002:Windows Guy9:/home/win9:/sbin/nologin

Resetting the winbind cache didn't help.

When an administrator is browsing user information, the win9 full name (Windows Guy9) won't be shown. Bummer.
Steps To Reproduce
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2012-03-09 12:45user2New Issue
2012-03-09 12:46user2Statusnew => confirmed
2012-03-09 12:46user2Description Updated
2013-04-10 09:07dloperNote Added: 0000792

Notes
(0000792)
dloper   
2013-04-10 09:07   
Turn the log level up to 3 in smb.conf.

Restart winbind.

type date
run getent group

Look in the /var/log/samba/log.wb-DOMAINNAME carefully. You may see an error for that timestamp that indicates an issue enumerating a certain aspect of the DOMAIN or even an attempt to enumerate a TRUSTEDDOMAIN.

If wbinfo is working for users or groups but fails to work for one or the other, the error will show up here. Getent bails if it has an error because /lib64/libnss_winbind.so.2 or /lib/libnss_winbind.so.2 is programmed typically to not give data over to nsswitch if it has an error. This is why individual queries for individual groups or users through getent may work when polling the long list fails (ie. getent group "domain users")