AD6380+TsInternetUser

AD6380+idsadmin

AD6380+krbtgt

AD6380+HOST/client1

AD6380+SMB3LAB26$

Important:

 The service nscd (name service caching daemon) interferes with 

proper functioning of winbind. 

Never

 run nscd on systems where winbindd 

runs.

With these settings the winbind daemon will be able to translate domain 

accounts to local users. We tell the system to actually use winbind by putting a 

reference in the Name Service Switch (NSS) configuration.

The configuration file for NSS is /etc/nsswitch.conf. This file contains entries like:

passwd: files example

This means that when a request for a password comes in, first a routine in 

/lib/libnss_files.so will be called to resolve it and then a routine in 

/lib/libnss_example.so. Once the request is resolved, the result will be returned 

to the application. To add winbind to the resolve path we change the following 

lines in /etc/nsswitch.conf in the following manner:

passwd: files winbind

group: files winbind

To test this execute the command:

getent passwd

This will return not only the entries in the file /etc/passwd but also the domain 

accounts that were translated by winbind.

Example 7 7   Partial example output of getent passwd using winbind in NSS

[root@client1 root]# getent passwd

root:x:0:0:root:/root:/bin/bash

bin:x:1:1:bin:/bin:/sbin/nologin

.......................

AD6380+Administrator:x:10000:10000:Administrator:/home/AD6380+Administrator:/bi

n/bash

AD6380+Guest:x:10001:10000:Guest:/home/AD6380+Guest:/bin/bash

AD6380+TsInternetUser:x:10002:10000:TsInternetUser:/home/AD6380+TsInternetUser:

/bin/bash

AD6380+idsadmin:x:10003:10000:idsadmin:/home/AD6380+idsadmin:/bin/bash

AD6380+krbtgt:x:10004:10000:krbtgt:/home/AD6380+krbtgt:/bin/bash

AD6380+HOST/client1:x:10005:10001:client1:/home/AD6380+HOST/client1:/bin/bash

138 

Linux Client Migration Cookbook   A Practical Planning and Implementation Guide for Migrating to Desktop