samba加入AD域

whliwenlong

我用samba加入AD域之后执行getent passwd和getent group都获取不到AD域账户的映射信息？这是什么情况？求解答
[root@samba-test ~]# wbinfo -t
checking the trust secret for domain RUICHI via RPC calls succeeded
[root@samba-test ~]# wbinfo -u
administrator
guest
krbtgt
zhangsan
lisi
wangwu
[root@samba-test ~]# wbinfo -g
domain computers
domain controllers
schema admins
enterprise admins
cert publishers
domain admins
domain users
domain guests
group policy creator owners
ras and ias servers
allowed rodc password replication group
denied rodc password replication group
read-only domain controllers
enterprise read-only domain controllers
dnsadmins
dnsupdateproxy
ruichi
[root@samba-test ~]#

NSS配置：
passwd:     files winbind
shadow:     files
group:      files winbind

smb.conf配置：

[global]
workgroup = RUICHI
netbios name = samba-test
security = ads
realm = RUICHI.COM
log file = /var/log/samba/log.%m
max log size = 50
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab

idmap config *:backend = tdb
idmap config *:range = 2000-9999
idmap config RUICHI:backend = ad
idmap config RUICHI:schema_mode = rfc2307
idmap config RUICHI:range = 10000-99999

winbind nss info = rfc2307
winbind trusted domains only = no
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
winbind refresh tickets = yes

vfs objects = acl_xattr
nt acl support = yes
map acl inherit = yes
store dos attributes = yes


执行getent passwd和getent group的时候获取不到映射账户的信息，求各位大神解答

charmingjeff

我的情况跟你类似，getent passwd有用户信息的，但getent group却没有组信息，真是奇怪，查不出问题在哪