Bug 5839 - idmap_ad - winbind shows wrong $HOME
Summary: idmap_ad - winbind shows wrong $HOME
Status: RESOLVED WORKSFORME
Alias: None
Product: Samba 3.2
Classification: Unclassified
Component: Winbind (show other bugs)
Version: 3.2.3
Hardware: x86 Linux
: P3 normal
Target Milestone: ---
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-10-21 09:43 UTC by Aiko Barz
Modified: 2009-04-28 17:34 UTC (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Aiko Barz 2008-10-21 09:43:16 UTC
Hi,

my winbind installation lists the wrong $HOME for my users. While
ldapsearch shows the correct $HOME, getent does not. 

### ldapsearch ###
$ ldapsearch -x -LLL -H ldaps://ad.domain.de -D Administrator@domain.local -S dn -s sub -W "(&(objectCategory=user)(sAMAccountName=aba))" unixHomeDirectory
Enter LDAP Password:
dn: CN=Aiko Barz,OU=Users,DC=domain,DC=local
unixHomeDirectory: /net/homeserver.domain.de/home/aba
### ldapsearch ###

### getent ###
$ getent passwd aba
aba:*:12345:1024:Aiko Barz:/home/DOMAIN/aba:/bin/false
### getent ###

=> "/net/homeserver.domain.de/home/aba" != "/home/DOMAIN/aba"

### smb.conf ###
[global]
netbios name = SERVER
workgroup = DOMAIN
realm = DOMAIN.LOCAL
preferred master = no
domain master = No
server string = %h
security = ADS
log level = 3
log file = /var/log/samba/%m
max log size = 50
syslog = 0
panic action = /usr/share/samba/panic-action %d
wins server = 10.11.12.13
winbind separator = +
printcap name = cups
printing = cups
nt acl support = yes

idmap domains = DOMAIN
idmap config DOMAIN:backend = ad
idmap config DOMAIN:default = yes
idmap config DOMAIN:range = 1024-1000000
idmap config DOMAIN:schema_mode = rfc2307

winbind enum users = Yes
winbind cache time = 86400
winbind enum groups = Yes
winbind nss info = rfc2307
winbind use default domain = Yes

[data]
comment = Data
path = /data/samba
read only = No
read list = @DOMAIN+Workgroup
write list = @DOMAIN+Workgroup
hide dot files = Yes
create mask = 0666
fstype = Samba
### smb.conf ###

I use Debian/Lenny at the moment:
ii winbind 2:3.2.3-1
Comment 1 Jelmer Jaarsma 2008-11-20 09:04:18 UTC
I suspect that this is being caused by a packaging error that was recently discovered in the Debian packages, see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506109

To verify, check if /usr/lib/samba/nss_info exists and contains symlinks.
Comment 2 Guenther Deschner 2009-04-28 17:34:36 UTC
Testing with 3.2.11 did not show this problem. homedirectory was correctly retrieved. please reopen if still an issue in newer versions of samba.