wbinfo
Query information about Windows domain users/groups
SYNOPSIS
wbinfo [options]
PARAMETERS
-u
Lists all users known to winbind.
-g
Lists all groups known to winbind.
-i
Retrieves information about a specific user (UID, GID, etc.).
-n
Performs a name to SID lookup.
-s
Performs a SID to name lookup.
-t
Tests the trust relationship with the domain.
-p
Tests if winbindd is alive.
-a
Authenticates a user using winbind.
-d
Sets the domain to be used for queries.
-r
Lists all groups the specified user is a member of.
-m
Lists trusted domains.
--online-status
Check if domain controller available
--user-domgroups
Lists domain groups of which the user is a direct or indirect member of.
--domain-info
Displays detailed domain information.
DESCRIPTION
wbinfo is a command-line utility used to query information about Windows domains from a Samba server. It allows administrators to retrieve information such as user and group lists, SID mappings, and trusted domains.
This tool is particularly useful in environments where Linux systems are integrated with Windows domains and Samba is used for file and print sharing, as well as user authentication. wbinfo relies on the winbind daemon, which must be running and properly configured to provide the necessary information. It's a crucial tool for verifying that winbind is functioning correctly and for troubleshooting authentication issues. The output can vary depending on the options used, and some options require root privileges. Incorrect configurations can prevent wbinfo from properly reporting user, group and domain data. It provides insight into the status of Samba's domain integration and helps manage identities between Linux and Windows environments.
CAVEATS
Winbind must be properly configured and running for wbinfo to function correctly. Incorrect configuration of Samba and winbind can lead to inaccurate results. Root privileges are often required for certain options. Results can be cached, requiring winbind restart to see fresh data.
TROUBLESHOOTING
If wbinfo fails to return expected results, check winbind's configuration file (smb.conf), ensure winbindd is running, and verify network connectivity to the domain controllers. Reviewing the Samba logs for error messages is crucial for diagnostics. Sometimes, clearing the winbind cache or restarting the winbind service can resolve issues.
HISTORY
wbinfo is a component of the Samba suite, which originated in the early 1990s. It was developed as a tool to bridge the gap between Unix-like systems and Windows networks, providing file and print sharing, and eventually user authentication services.
The wbinfo command emerged as winbind's functionality grew, giving administrators a way to interact with and query the winbind daemon. As Active Directory became more prevalent, wbinfo became an indispensable tool for managing identity mapping and trust relationships between Linux systems and Windows domains.