Subject: Re: nsswitch and libnss_winbind
To: Sarton O'Brien <bsd-xen@roguewrt.org>
From: Luke Mewburn <lukem@NetBSD.org>
List: current-users
Date: 05/30/2007 14:39:27
--nDmTXYS4kVhtHHfR
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, May 30, 2007 at 09:49:11AM +1000, Sarton O'Brien wrote:
  | From my understanding I should at least receive debug from winbindd onc=
e=20
  | libnss_winbind has been accessed for retrieving the group listing from =
the=20
  | DC. So far I get nothing at all. It seems the library is not in the rig=
ht=20
  | spot, linked correctly or is just not being used.
  |=20
  | As the program I am using to test merely uses nsswitch I wouldn't know
  | where to look for any calls possibly being made to the required library.
  |=20
  | I guess the answer I am looking for is a firm 'yes this facility works,=
 I
  | have it set like this'  :) ... or a 'no it's not supported' would suffi=
ce.


On NetBSD, you can use the getent(1) command to perform lookups
in the various databases that are switched through nsswitch.conf.
This should help in testing your nsswitch.conf and /lib/nss_FOO.so
setup.
For example, does 'getent passwd' dump your entire /etc/passwd and
winbind maps if you're using ``passwd: files winbind'' ?

As I mentioned previously, I haven't used this in a while.
When I did the development a few years ago, I had it working
for nsswitch lookups for uid/gid (but not PAM authentication).

--nDmTXYS4kVhtHHfR
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (NetBSD)

iD8DBQFGXP//pBhtmn8zJHIRAvMNAKClW7YfU3exwPWNlveaz9cnzhF1RQCeOGiE
z2hTVBIbHWuWcA4zsK/Y9Go=
=UUmj
-----END PGP SIGNATURE-----

--nDmTXYS4kVhtHHfR--