Subject: Re: nsswitch and libnss_winbind
To: Sarton O'Brien <bsd-xen@roguewrt.org>
From: Luke Mewburn <lukem@NetBSD.org>
List: current-users
Date: 05/30/2007 14:39:27
--nDmTXYS4kVhtHHfR
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Wed, May 30, 2007 at 09:49:11AM +1000, Sarton O'Brien wrote:
| From my understanding I should at least receive debug from winbindd onc=
e=20
| libnss_winbind has been accessed for retrieving the group listing from =
the=20
| DC. So far I get nothing at all. It seems the library is not in the rig=
ht=20
| spot, linked correctly or is just not being used.
|=20
| As the program I am using to test merely uses nsswitch I wouldn't know
| where to look for any calls possibly being made to the required library.
|=20
| I guess the answer I am looking for is a firm 'yes this facility works,=
I
| have it set like this' :) ... or a 'no it's not supported' would suffi=
ce.
On NetBSD, you can use the getent(1) command to perform lookups
in the various databases that are switched through nsswitch.conf.
This should help in testing your nsswitch.conf and /lib/nss_FOO.so
setup.
For example, does 'getent passwd' dump your entire /etc/passwd and
winbind maps if you're using ``passwd: files winbind'' ?
As I mentioned previously, I haven't used this in a while.
When I did the development a few years ago, I had it working
for nsswitch lookups for uid/gid (but not PAM authentication).
--nDmTXYS4kVhtHHfR
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (NetBSD)
iD8DBQFGXP//pBhtmn8zJHIRAvMNAKClW7YfU3exwPWNlveaz9cnzhF1RQCeOGiE
z2hTVBIbHWuWcA4zsK/Y9Go=
=UUmj
-----END PGP SIGNATURE-----
--nDmTXYS4kVhtHHfR--