Nsswitch.conf

Question

Hi everyone,
I'm going to start by mentioning that I'm new to solaris. I've mostly been an archlinux user thus far. Now I've built a new fileserver and decided to run solaris because I felt that ZFS had a lot to offer, and I'm playing with the idea of moving my webserver into a zone on this new box in order to take the dedicated system offline as it's underutilized.
Now the main things I need so far are kerberos for active directory integration, and smb for file sharing, this seems fairly simple to me, and nothing I haven't done on a typical Linux system
but I'm having problems. getting things going has not been as painless as I expected, I've hit a learning curve so to speak and I'm having a few issues.
I'm going to start with winbind.
How do I configure the nsswitch.conf so that it doesn't get reset after I reboot the system?
everytime I boot, I have to reconfigure it, and restart winbind in order to get anything listed with getent
the other thing there, is when I run getent passwd, I see my AD users listed. but when I run getent group, I only see the local groups, nothing from AD appears

Answer 1

I took another stab at the kclient config. i'd like to know what i'm missing here though
solaris@srv-data:~$ sudo svccfg -s network/dns/client setprop config/nameserver = net_address: "(10.66.1.1 10.66.1.9)"
Password:
solaris@srv-data:~$ sudo svccfg -s network/dns/client setprop config/domain = astring: "sergeinc.org
solaris@srv-data:~$ sudo svccfg -s network/dns/client setprop config/domain = astring: "sergeinc.org"
solaris@srv-data:~$ sudo svccfg -s network/dns/client setprop config/search = astring: "sergeinc.org"
solaris@srv-data:~$ sudo svccfg -s network/dns/client setprop config/host = astring: '("files" "dns")'
solaris@srv-data:~$ sudo nscfg export svc:/network/dns/client:default
solaris@srv-data:~$ cat /etc/resolv.conf
+#+
+# AUTOGENERATEDFROM_SMF_V1_+
+#+
+# WARNING: THIS FILE GENERATED FROM SMF DATA.+
+# DO NOT EDIT THIS FILE. EDITS WILL BE LOST.+
+# See resolv.conf(4) for details.+
domain  sergeinc.org*
search  sergeinc.org*
nameserver      10.66.1.1*
nameserver      10.66.1.9*
solaris@srv-data:~$ cat /etc/nsswitch.conf
+#+
+# AUTOGENERATEDFROM_SMF_V1_+
+#+
+# WARNING: THIS FILE GENERATED FROM SMF DATA.+
+# DO NOT EDIT THIS FILE. EDITS WILL BE LOST.+
+# See nsswitch.conf(4) for details.+
passwd: files winbind
group:  files winbind
hosts:  files dns mdns
ipnodes:        files dns mdns
networks:       files
protocols:      files
rpc:    files
ethers: files
netmasks:       files
bootparams:     files
publickey:      files
netgroup:       files
automount:      files
aliases:        files
services:       files
printers:       user files
project:        files
auth_attr:      files
prof_attr:      files
tnrhtp: files
tnrhdb: files
sudoers:        files
solaris@srv-data:~$ sudo svccfg -s name-service/switch setprop config/host = astring: '("files dns")'
solaris@srv-data:~$ sudo svccfg -s name-service/switch setprop config/ipnodes = astring: '("files dns")'
solaris@srv-data:~$ sudo svcadm refresh svc:/system/name-service/switch:default
solaris@srv-data:~$ cat /etc/nsswitch.conf
+#+
+# AUTOGENERATEDFROM_SMF_V1_+
+#+
+# WARNING: THIS FILE GENERATED FROM SMF DATA.+
+# DO NOT EDIT THIS FILE. EDITS WILL BE LOST.+
+# See nsswitch.conf(4) for details.+
passwd: files winbind
group:  files winbind
hosts:  files dns*
ipnodes:        files dns*
networks:       files
protocols:      files
rpc:    files
ethers: files
netmasks:       files
bootparams:     files
publickey:      files
netgroup:       files
automount:      files
aliases:        files
services:       files
printers:       user files
project:        files
auth_attr:      files
prof_attr:      files
tnrhtp: files
tnrhdb: files
sudoers:        files
solaris@srv-data:~$ sudo cp /etc/krb5/krb5.conf /etc/krb5/krb5.conf.backup
solaris@srv-data:~$ kclient
Can not create directory: /system/volatile/kclient
solaris@srv-data:~$ sudo kclient
Starting client setup
+Is this a client of a non-Solaris KDC ? [y/n]: y+
Which type of KDC is the server:
ms_ad: Microsoft Active Directory
mit: MIT KDC server
heimdal: Heimdal KDC server
shishi: Shishi KDC server
Enter required KDC type: ms_ad
Setting up /etc/krb5/krb5.conf.
Attempting to join 'SRV-DATA' to the 'SERGEINC.ORG' domain.
Password for [email protected]:
Forest name found: sergeinc.org
Site name not found.  Local DCs/GCs will not be discovered.+
Computer account 'SRV-DATA' already exists in the 'SERGEINC.ORG' domain.
+Do you wish to recreate this computer account ? [y/n]: y+
+Would you like to delete any sub-object found for this computer account ? [y/n]: y+
Looking to see if the machine account contains other objects...
Creating the machine account in AD via LDAP.
Warning: unable to create DNS records for client.
This could mean that 'srv-ad.sergeinc.org' is not included as a 'nameserver' in the /etc/resolv.conf file or some other type of error.
Setup COMPLETE.
so that all seemed well.....but then after a reboot....
solaris@srv-data:~$ cat /etc/nsswitch.conf
+#+
+# AUTOGENERATEDFROM_SMF_V1_+
+#+
+# WARNING: THIS FILE GENERATED FROM SMF DATA.+
+# DO NOT EDIT THIS FILE. EDITS WILL BE LOST.+
+# See nsswitch.conf(4) for details.+
passwd: files
group:  files
hosts:  files dns mdns*
ipnodes:        files dns mdns*
networks:       files
protocols:      files
rpc:    files
ethers: files
netmasks:       files
bootparams:     files
publickey:      files
netgroup:       files
automount:      files
aliases:        files
services:       files
printers:       user files
project:        files
auth_attr:      files
prof_attr:      files
tnrhtp: files
tnrhdb: files
sudoers:        files
solaris@srv-data:~$ cat /etc/resolv.conf
+#+
+# AUTOGENERATEDFROM_SMF_V1_+
+#+
+# WARNING: THIS FILE GENERATED FROM SMF DATA.+
+# DO NOT EDIT THIS FILE. EDITS WILL BE LOST.+
+# See resolv.conf(4) for details.+
domain  sergeinc.org*
nameserver      10.66.1.1*
solaris@srv-data:~$