similar to: Problem IDMAP Domain Member -> PDC

hi list, i recently recognized, that winbind on my fileserver (needed for allocating SID->UIDs when setting ACL's from windows box) adds ldap attributes although the SID already exists !!??!?! example i have a user "install" # install, users, eva.mpg.de dn: uid=install,ou=users,dc=eva,dc=mpg,dc=de objectClass: posixAccount objectClass: person objectClass: sambaSamAccount cn:

hi, today i experience a very crazy behaviour: 1) yesterday my winbindd crashed (s. log.crash) (status: "dead") 2) restarted winbind and saw that some files have no owner (just the uidNumber) 3) getent passwd, wbinfo -u shows me all users (authenticating agains Windows PDC) 4) i'm using nsswitch (passwd: files winbind, group: files winbind) e.g. (getent passwd) .... (snip)

HI, I met problm with windbind. Everything seems to work fine samba 3.0.7 - ldap - ssl But in can not change user password account from windows workstation. I investigate and find Wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_UNSUCCESSFUL (0xc0000001) Could not check secret Wbinfo - u Error looking up domain users Wbinfo -g Just

I'm using Samba 3.0.21b on SuSE 9.3 Pro (x86) with the binary RPMs from samba.org/suse.com (3.0.21b-1.1.2-SUSE-SL9.3) on a Domain Member Server in ADS mode with winbind against W2K3 SP1 AD servers and idmap uids/gids stored in a central OpenLDAP directory. Unfortunately, winbind gives me a hard time and reproducibly dies with a PANIC on a "wbinfo -g", although I think I've

hi, when i do nevanfs01:/ # nmblookup NEVAN#1B i get querying NEVAN on 192.168.255.255 192.168.41.3 NEVAN<1b> 192.168.41.3 NEVAN<1b> i just wonder, why there's two times the same entry? i also get error messages from nmbd like these, which i think are related to the problem i mentioned at first: 2004-07-21 13:34:21 nmbd[3150]: [2004/07/21 13:34:09, 0]

Hello, recently I migrated 3 Netware 4.11 server to one Linux/Samba-box running on Suse Enterprise Server 7. Everything seemed fine, until performance problems were detected, especially when starting programs located on shares. Samba is a domain member using an NT4 PDC for authentication. The current samba version is 2.2.6 and the kernel is 2.4.19, but with 2.2.4 and 2.4.18 there was no

Please help. I've been searching for days, trying nearly everything I can find that seems relevant, but I can't get this working. I am able to create users, login to Windows systems joined to the SAMBA domain as those users, but filesystem ACLs on Windows Domain Member Servers do not work which I suspect is due to my IDMAP OU is empty. wbinfo -u returns "Error looking up domain

Hello Samba folks, I have recently begun seeing some disturbing behavior from winbind. Winbind will fail to look up users and groups. Examples: The machine is configured to use winbind as a nss module. "getent passwd <username>" will yield no results. "wbinfo -n <username>" will yield "Could not lookup name <username>" "wbinfo -g"

Hello, I've been able to get Samba up and running, it joins the ADS domain fine. It appears in the network browser on our Windows machines but when anyone attempts to access a restricted share it fails to authenticate them. I say restricted because if anyone accesses an open to everyone share it works. I'm trying to get the entire thing setup so that the Samba server is just a

I have two boxes on which I am trying to get idmap_ad (from xad_oss_plugins) to provide uid/gid mapping, and am getting the error: "Could not convert sid <sid of some_user> to uid" The story so far goes like this: Without the line "idmap backend = ad:ldap://<PDC's FQDN>/" in smb.conf, I can successfully do all of: #> wbinfo -S $(wbinfo -n some_user | awk

Hi guys i'm having a problem with connecting a domain memberserver and getting the idmaps to work correctly. I have winbindd running on both so it should be going. Both are linux servers. Here's my deal *Errors:* [2007/07/13 05:29:16, 0] sam/idmap_ldap.c:ldap_get_sid_from_id(269) ldap_get_sid_from_id: mapping not found for gidNumber: 0 [2007/07/13 05:29:16, 0]

A problem On the integrate Samba and AD 2k3 .. the page is my reference http://www.infosecwriters.com/text_resources/pdf/AD_and_Linux_TMunn.pdf i wnat to use users group for squid' wbinfo_group.pl use auth... now i can join the samba server to AD domain but i can't read user's group.. can any one tell me what is happend.. like this [root@wxyz-dns1 samba]# wbinfo -u

Hi there, I have another problem on WinXP SP2 with samba.3.0.20a. Somehow, in a random situation, once user logged onto the workstations, they were prompted with the winlogon.exe Fatal error + blue screen to death then self-reboot. When I checked out the log from windows, it said there's problem on msgina.dll from WinXP SP2. However, another user can successfully logon to the same workstation

I want to limit access to shares via windows groups but when I set a share to anything other than 'valid users = %S' or 'valid users =', I cannot access the share. The error message indicates that the share is not accessible and I may not have sufficient permissions. If I change just the valid users in smb.conf and restart smb, I get right in without prompting. I also found that I

Hello all, I have a strange problem that I'd like advice on. Here I run several samba servers as home directory and print servers for an NT 4.0 (sp6a) domain. The domains relevant to this problem are CANNING and STUDENT. The STUDENT domain trusts users in the CANNING domain. My samba server is RedHat 6.2 (+ updates) running samba 2.2.7 (built today). I upgraded because of a different

Hi I have a problem with an interdomain trust where on the PDC for DomainA, everything works perfectly. getent returns local and DomainB usernames. On the PDC for DomainB, it's DomainB works fine, but getent only returns local usernames and groups, it doesn't return the usernames or groups for DomainA. wbinfo -u and wbinfo -g work fine and return all DomainA's usernames and groups.

# wbinfo -Y S-1-5-11 Could not convert sid S-1-5-11 to gid # wbinfo -Y S-1-5-13 Could not convert sid S-1-5-13 to gid (S-1-5-11 are the Authenticated Users, S-1-5-13 are the Terminal Server Users.) This bug was finally solved in release 3.023d. Now it is back again. How can I get this working? I'm using idmap/tdb - would another idmap-module solve this issue? The winbind log looks like

Hello experts, I?ll try and keep this brief but detailed (if that?s possible.). I?m sure I don?t understand the technologies sufficiently but I believe I?m seeing counter-intuitive behavior with my Samba 3 setup. What I want is nice, tight Win 2K3 security. What I?ve got is ADS integration, including domain user authentication using winbind, but I can?t get the security level right. Problem

Hi! I have the following problem: winbindd getgrnam/getpwnam/lookupname calls do not return for a long time (> 30 seconds) which is obviously quite annoying to the users. This usually happens at the "first" login, i.e. subsequent connections are not delayed until a (probably cache) timeout. I've failed to determine who is responsible for the caching yet. I'll provide

Hi All, I'm having issues getting Samba/Winbind to work with a domain that is lowercase. I have read on some sites that it won't work, is this the case? system is Debian lenny, samba 3.2.5-4. Windows server is 2003 running AD in 2000 native mode. I've done everything I would normally do that my running samba/ad authing servers do, and wbinfo -u + wbinfo -g work fine, as do the