<div>
what does wbinfo -g and getent passwd give ?
</div>

<div>
wbinfo -g shows a list of AD groups as expected but getent passwd shows what looks like the contents of the /etc/passwd - so it appears to be showing only local linux passwd information.
</div>

<div>
can u post your winbind log /var/log/samba/winbindd.log 
and your /etc/samba/smb.conf 

</div>

<div>
Also 
try this 
stop winbind 
move or delete /var/cache/samba/winbindd_idmap.tdb 
start winbind again 
getent passwd 
 
if you need the existing winbind map 
back it up first 
net idmap dump /var/cache/samba/winbindd_idmap.tdb &gt;&nbsp;/root/idmap.out 
then proceed as above.
</div>

<div>
Hi, 
 
I did as you suggested by removing the idmap file from the cache but the same problem still occurs. My samba config file and winbindd.log files are listed as requested. 
&nbsp;Thanks.. 
 
#======================= Global Settings ===================================== 
[global] 
&nbsp; &nbsp;workgroup = BROADSOFT 
&nbsp; &nbsp;password server = server201.broadsoft.local 
&nbsp; &nbsp;realm = BROADSOFT.LOCAL 
&nbsp; &nbsp;security = ads 
&nbsp; &nbsp;idmap uid = 10000-20000 
&nbsp; &nbsp;idmap gid = 10000-20000 
&nbsp; &nbsp;winbind separator = + 
&nbsp; &nbsp;template shell = /bin/bash 
&nbsp; &nbsp;winbind use default domain = false 
&nbsp; &nbsp;winbind offline logon = false 
&nbsp; &nbsp;netbios name = server200 
&nbsp; &nbsp;server string = Linux Server 
&nbsp; &nbsp; hosts allow = 192.168.5. 127. 
&nbsp; &nbsp;log file = /var/log/samba/gplog 
&nbsp; &nbsp;max log size = 50 
&nbsp; &nbsp;encrypt passwords = yes 
&nbsp; &nbsp;obey pam restrictions = yes 
&nbsp; &nbsp; socket options = TCP_NODELAY 
&nbsp; &nbsp; interfaces = 192.168.5.200/24 
&nbsp; &nbsp;dns proxy = no 
&nbsp; &nbsp; server signing = auto 
&nbsp; &nbsp; client use spnego = yes 
&nbsp; &nbsp; winbind cache time = 7 
 
 
#============================ Share Definitions ============================== 
[homes] 
&nbsp; &nbsp;comment = Home Directories 
&nbsp; &nbsp;create mask = 775 
&nbsp; &nbsp;browseable = no 
&nbsp; &nbsp;guest ok = no 
&nbsp; &nbsp;writable = yes 
&nbsp; &nbsp;hide dot files = yes 
 
[Shared] 
&nbsp; &nbsp;comment = Common Shared Files 
&nbsp; &nbsp;path = /home/shared 
&nbsp; &nbsp;public = yes 
&nbsp; &nbsp;only guest = yes 
&nbsp; &nbsp;writable = yes 
&nbsp; &nbsp;printable = no 
&nbsp;#================ End of File ============================ 
 
******** winbindd.log contents **** 
[2008/07/19 20:00:44, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/19 20:00:44, 0] nsswitch/winbindd_cache.c:initialize_winbindd_cache(2227) 
&nbsp; initialize_winbindd_cache: clearing cache and re-creating with version number 1 
[2008/07/19 22:29:39, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/19 23:29:16, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/20 00:08:23, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/20 00:09:11, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/20 00:11:47, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/20 00:13:31, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/20 00:14:24, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/20 00:14:40, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/20 07:23:23, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/20 07:26:07, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/20 07:30:05, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
[2008/07/20 08:17:01, 1] nsswitch/winbindd.c:main(990) 
&nbsp; winbindd version 3.0.28-1.el5_2.1 started. 
&nbsp; Copyright Andrew Tridgell and the Samba Team 1992-2007 
 
 

</div>

<div>
Yes, adding these lines to smb.conf caused the getent group to function correctly. Many thanks for your assistance.
</div>

<div>
<div class="content wysiwyg-content">
Hi, I have an AD domain to which I want to attach a samba file server. I am setting up common auth using winbind and samba. So far I have been able to join the domain with the samba server and I can see users with wbinfo -u. 
 
My problem is that when I look for AD groups using getent group I see only local linux groups listed. I have modified the nsswitch.conf file as recommended and krb5 seems to be running OK. Time sync between the two machines is OK.
</div>
</div>

Hi, I have an AD domain to which I want to attach a samba file server. I am setting up common auth using winbind and samba. So far I have been able to join the domain with the samba server and I can see users with wbinfo -u.

My problem is that when I look for AD groups using getent group I see only local linux groups listed. I have modified the nsswitch.conf file as recommended and krb5 seems to be running OK. Time sync between the two machines is OK.

Problem with winbind and AD - AD groups not being displayed with getent group

A server is a computer program or a machine that waits for requests from other machines or software (clients) and responds to them. This architecture is called the client–server model. The clients may run on the same computer or may connect to the server over a network. The purpose of a server is to share data or hardware and software resources among clients. Typical computing servers are database servers, file servers, mail servers, print servers, web servers, game servers, and application servers.

Server Software

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

The variety of Linux distributions creates myriad issues relating to configuration and operations when computers are networked, not the least of which is the use of various network management applications, some of which are included with specific distributions, while others are standalone applications.