nsswitch.conf winbind and trusted mode

[Mauro Gatti]

Hi all,
I would like to add winbind entry in my nsswitch.conf to allow my system to authenticate samba users from windows DC.
Unluckly if I change passwd and group rows in nsswitch.conf adding "winbind" I can't able to login in my system.
It seems the system has the same problem when in nsswitch.conf there is "compact" entry.
Could you explain to me why "compact" doesn't work in trusted system and why if I add winbind entry I'm no loger able to login in my system)?

Thank You

[Thayanidhi]

In my experiance samba in trusted mode doesn't go well. I reverted back to untrusted. I still believe you cannot use trusted mode while using samba!

Regds
TT

[Mauro Gatti]

Hi Thayanidhi,
I have souspicious nss mechanism has some problems in trusted mode.
Compat doesn't work, winbind doesn't work even if there is its library libnss_winbind.1 in /usr/lib.
man nsswitch.conf tells:
FILES
A source named SSS is implemented by a shared object named nss_SSS.1
that resides in /usr/lib.

/etc/nsswitch.conf configuration file
/usr/lib/nss_compat.1 implements "compat" source
/usr/lib/nss_dns.1 implements "dns" source
/usr/lib/nss_files.1 implements "files" source
/usr/lib/nss_nis.1 implements "nis" source
/usr/lib/nss_nisplus.1 implements "nisplus" source
/usr/lib/nss_ldap.1 implements "ldap" source

but there is any nss_SSS.1 file in /usr/lib but libnss_SSS.1