Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm currently in the process of setting up winbind/samba and getting a few issues.

I can test connectivity with wbinfo fine:

[root@buildmirror ~]# wbinfo -u
hostname     username

[root@buildmirror ~]# wbinfo -a username%password
plaintext password authentication succeeded
challenge/response password authentication succeeded

however when I do a getent I don't get any AD accounts returned

[root@buildmirror ~]# getent passwd

my nsswitch looks like this:

passwd:     files winbind
shadow:     files winbind
group:      files winbind

#hosts:     db files nisplus nis dns
hosts:      files dns

and I'm definitely joined to the domain:

[root@buildmirror ~]# net ads info
LDAP server:
LDAP server name: pdc.domain.local
Realm: domain.local
Bind Path: dc=DOMAIN,dc=LOCAL
LDAP port: 389
Server time: Sun, 05 Aug 2012 17:11:27 BST
KDC server:
Server time offset: -1

So what am I missing?

share|improve this question
@skohrs' answer below worked for me, but I never even noticed it was a "problem." Just curious what you ran into that needed this functionality. (It might help me in the future.) – Aaron Copley Aug 7 '12 at 20:04
what's your smb.conf look like? – Dejan Nov 28 '13 at 19:13

Do you have the following lines in /etc/samba/smb.conf?

winbind enum users = yes
winbind enum groups = yes
share|improve this answer
Worked for me. Thank you. – Aaron Copley Aug 7 '12 at 20:03

getent does not show domain users by default. You can, however, use it for one user name at a time for a known AD user: getent passwd mydomainuser

If you are unable to login as users, make sure your pam files are setup correctly. On Ubuntu (and maybe Debian?) this is easiest done with the command pam-auth-update On RH/Fedora, use the authconfig-tui command.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.