similar to: win2k domain-less client failing to authenticate when securit y=domain

with samba 3.0.22, I'm trying to integrate a linux box with Microsoft AD by using winbind for authentication as well as for the source of nss info. When winbind is configured to use its own local id maps, everything works fine. But when i configure winbind to use 'ad' as the source of nss info, authentication fails, 'getent' commands return no results, and 'wbinfo -r

Hello, I've got a linux box running smbd & nmbd versions 2.0.6 with security = DOMAIN, and an NT4 box as the password server. The sole domain controlled by that NT4 box is named "MSOE". All is well with win98 clients. However, Win2k clients that are not part of an NT domain, but simply belong to a "workgroup" named "MSOE", are unable to authenticate. The

Hello, I followed the steps at http://www.enterprisenetworkingplanet.com/netos/article.php/3487081 for adding a v3.0.21a samba and winbindd server to a MsAD domain and configuring nsswitch.conf to find passwd and group info from winbind. This seems to have worked out fine, except that I can't 'see' or 'recognize' certain groups via getent or via wbinfo -g. E.g. I can see the

I'm using winbind v3.0.22 on Debian Linux as a source for nss info. I have a group that was once known by winbind, but is no more: ------ beging shell except ------ # ls -ld ./ drwxrws--- 10 root $MND000-TT227MV5K24I 4096 2006-05-10 15:41 ./ # ------ end shell except ------ It must have been known, as I was the one who chgrp'ed the dir originally. I know what the group name is

When winbind is configured without the 'winbind nss info =' statement (i.e. such that winbind maintains its own local map of SIDs -> UID/GIDs), the following works fine: # cd ~detertj # getent passwd detertj detertj:x:10008:10000:detertj:/home/MSOE/detertj:/bin/bash but when i try to make winbind use sfu for the mapping of SID -> UID/GID, username lookups are

new installation of samba v3.0.21 on debian. Joined the samba box to an ActiveDirectory domain. Can enumerate users/groups with wbinfo run locally on the samba box. Can connect remotely to samba box via smbclient Version 3.0.10-Ubuntu linux. Can create new files via 'put' cmd within smbclient. Can login remotely to samba box with ssh client on linux box. Can _NOT_ map a drive to samba

There is an instance of Ms.Active Directory that has had the 'Services For Unix' applied. I use winbind v3.0.24 to get user/group info from that Ms.Active directory instance like so: -------- begin smb.conf snippet: ------------ security = ADS realm = mydomain.com workgroup = MYDOMAIN winbind enum groups = yes winbind enum users = yes winbind nested groups = yes winbind nss info = sfu

I am currently using Mssfu, nss_ldap, and pam_ldap to enable my linux boxes to auth against MsA.D. and get all their user info from MsA.D. I recently discovered that winbind can accomplish the same without Mssfu, as long as I'm content to be limitted by the winbind config directives 'template shell' and 'template homedir'. I'd like to drop sfu if I can. The 'template

Now I'm trying to make it so the Samba accounts can be used for user logins as well. Unfortunately I'm having a bit of trouble with winbind. Whenever I try to do a "getent passwd eknuds", it find the entry in the ldap sam, but the winbind log for my domain comes up with this and the getent displays nothing: [2007/03/07 15:48:46, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541)

this problem might be more to do with apache than winbind, but I'll start here anyway... Problem: can't get apache httpauth to work with nested groups, though ssh auth (also using pam) to same box does Config: -------------------------------------------------------- software: apache 2.0.55, libapache2-mod-auth-pam 1.1.1, and winbind 3.0.22 pertinent apache config:

hi again. after some tests, (on my operational domain and on a new testdomain) i detected this behavior: on samba 4.11.6 sometimes the new DNS-records finisches on a wrong dns zone. the problem occurs, if more then 5 records are created with the same name in more then one domain zone for example: testa1.jupiter.mydom.org testa2.jupiter.mydom.org testa3.jupiter.mydom.org

I have winbind v3.0.26a running on ubuntu server v7.10 (gutsy). I intend to get user & group info from MsActiveDirectory. However, when I type: getent passwd somerandomuser I get the uid and gid for the user, as recorded in the msad schema by virtue of sfu, but the homedir and loginshell that are returned are like what "winbind nss info = template" would return by default:

Hai Christian, > Can someone reproduce this? No, tried, but sorry, works fine for me on my 4.11.6 server. And what is you try it like this. samba-tool dns add dc1.zone1.domain.de 0.168.192.in-addr.arpa 157 PTR zone1.domain.de -U Administrator samba-tool dns add dc1.zone1.domain.de 1.168.192.in-addr.arpa 157 PTR zone2.domain.de -U Administrator I tested on my production where i have 6

I've got samba v3.0.21 on server 'RELIANT' with security=ADS I want MsWin XP clients, that have logged into Microsoft AD domain 'MYDOMAIN' to be able to map a drive to 'RELIANT', and to do so without having to authenticate again. I haven't been able to do so. Here's what happens: the XP client doesn't prompt for authentication (which is good,

List, I apologize for the "newbie" nature of this post; I am sure there is an easy answer somewhere, but I've tried all the search terms I can think up and can't find it. I have some video archived on a White Box 4 machine. I watch it on a Windows XP box in the other room by mapping a drive to a Samba share. Seemingly at random, my video stream will halt due to an inability to

Hi, yes, it is. Anyway, below are some of the diagnostics I have tried. Linux box Win95 Box ========= =========== hostname: saturn tempest ip: 192.168.0.2 192.168.0.1 Below are the diagnostics that I have tried and I ahve logged them: 1. From

Hi, i try booting a PXE equipped client with pxelinux. The problem is: after receiving the file pxelinux.0 it requests pxelinux.cfg/C0A86451 and aborts. tcpdump: .... 16:01:58.786946 192.168.100.81.2073 > saturn.1337: udp 4 16:01:58.787033 saturn.1337 > 192.168.100.81.2073: udp 516 (DF) 16:01:58.787202 192.168.100.81.2073 > saturn.1337: udp 4 16:01:58.787528 saturn.1337 >

Funny you should post this now. I was just cleaning up some DNS records and the following happend. I had to PTR records with an empty timestamp. I deleted them and wanted to recreate them. My reverse Zones are 0.168.192.in-addr.arpa and 2.168.192.in-addr.arpa both of the records I delted were in the "0" zone. The first i recreated with: samba-tool dns add dc1

suggestion for minor improvement of the smb.conf manpage in the context of the 'idmap backend' parameter. At least as of v3.0.22 the manpage says: Finally, using the idmap_ad module, the UID and GID can directly be retrieved from an Active Directory LDAP Server that supports an RFC2307 compliant LDAP schema. idmap_ad supports "Services for Unix"

I am having a problem with rsync hanging after completion. The command I am using is: rsync -vaz --delete /banproc/ backenp650:/banproc (thanks jw for the syntax correction) There were 56 deletions on the destination and ~ 1380 files copied total (I gathered these stats by using grep and wc -l on a saved file of my ssh session to the source host). Below is the last couple of lines on my ssh