Anonymous | Login | 2024-12-21 18:17 MST |
Main | My View | View Issues | Change Log | Roadmap | Repositories |
View Issue Details [ Jump to Notes ] | [ Issue History ] [ Print ] | ||||||||||||
ID | Project | Category | View Status | Date Submitted | Last Update | ||||||||
0000468 | ClearCenter | app-active-directory - Active Directory Connector | public | 2012-03-09 12:45 | 2013-04-10 09:07 | ||||||||
Reporter | user2 | ||||||||||||
Assigned To | |||||||||||||
Priority | normal | Severity | minor | Reproducibility | random | ||||||||
Status | confirmed | Resolution | open | ||||||||||
Platform | OS | OS Version | |||||||||||
Product Version | |||||||||||||
Target Version | Fixed in Version | ||||||||||||
Summary | 0000468: Weird behavior in getent leads to missing full name when retrieving user info | ||||||||||||
Description | The following strange behavior occurred on a test system connected to Active Directory: # getent passwd win9 win9:*:20000013:20000002::/home/win9:/sbin/nologin # getent passwd | grep win9 win9:*:20000013:20000002:Windows Guy9:/home/win9:/sbin/nologin Resetting the winbind cache didn't help. When an administrator is browsing user information, the win9 full name (Windows Guy9) won't be shown. Bummer. | ||||||||||||
Tags | No tags attached. | ||||||||||||
Attached Files | |||||||||||||
Notes | |
(0000792) dloper (administrator) 2013-04-10 09:07 |
Turn the log level up to 3 in smb.conf. Restart winbind. type date run getent group Look in the /var/log/samba/log.wb-DOMAINNAME carefully. You may see an error for that timestamp that indicates an issue enumerating a certain aspect of the DOMAIN or even an attempt to enumerate a TRUSTEDDOMAIN. If wbinfo is working for users or groups but fails to work for one or the other, the error will show up here. Getent bails if it has an error because /lib64/libnss_winbind.so.2 or /lib/libnss_winbind.so.2 is programmed typically to not give data over to nsswitch if it has an error. This is why individual queries for individual groups or users through getent may work when polling the long list fails (ie. getent group "domain users") |
Issue History | |||
Date Modified | Username | Field | Change |
2012-03-09 12:45 | user2 | New Issue | |
2012-03-09 12:46 | user2 | Status | new => confirmed |
2012-03-09 12:46 | user2 | Description Updated | |
2013-04-10 09:07 | dloper | Note Added: 0000792 |