Re: Example of proper getent output

[Arthur de Jong <arthur [at] arthurdejong.org>]

On Sat, 2010-10-23 at 11:56 -0600, ddmayne@xmission.com wrote:
> My question is about the command,
> 
> $ getent group
> 
> The output from that command does not appear to be supplemented with  
> AD groups. Is this the normal behaviour?

It is supposed to return all groups, including ones in AD. Perhaps the
search filter in nslcd.conf is wrong. You could try the following:
  filter group (&(objectClass=group)(gidNumber=*))
which should limit the results to valid entries only. Another source of
trouble can be in /etc/nsswitch.conf.

Without the contents of nslcd.conf and output from nslcd -d it is
difficult to debug this further though.

Hope this helps. I don't have first hand experience with AD though.

-- 
-- arthur - arthur@arthurdejong.org - http://arthurdejong.org --

--
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users