samba - Nov 2003 - winbind and getent ...

Greetings ...

    Okay, I was going to send this to Tech, but throught better of it.

    I have got my ADS/Win2K3 system and Samba3 using winbind.  I am able 
to do getent passwd, which returns users out of ADS.

    My problem is that I wish to have a Samba box at a remote location, 
which I currently have, using user accounts stored in LDAP, but have not 
choice but to move to ADS based users because of a Citrix application 
which we are not able to get to work with Samba and LDAP based accounts.

    If I enable domain logons, getent passwd returns only local 
accounts, not ADS based account, plus, I have also seen that if I set 
winbind trusted domains only = yes, then getent passwd also stops working.

    Now I am sure, I read somewhere, that you can't use winbind and 
domain logons, but I am hoping somebody might be able to give us better 
idea.

Thanks
Mailed
Lee

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

C.Lee Taylor wrote:
>    I have got my ADS/Win2K3 system and Samba3 using winbind.  I am able 
> to do getent passwd, which returns users out of ADS.
> 
>    My problem is that I wish to have a Samba box at a remote location, 
> which I currently have, using user accounts stored in LDAP, but have not 
> choice but to move to ADS based users because of a Citrix application 
> which we are not able to get to work with Samba and LDAP based accounts.
> 
>    If I enable domain logons, getent passwd returns only local accounts, 
> not ADS based account, plus, I have also seen that if I set winbind 
> trusted domains only = yes, then getent passwd also stops working.
> 
>    Now I am sure, I read somewhere, that you can't use winbind and 
> domain logons, but I am hoping somebody might be able to give us better 
> idea.
In Samba 3.0, winbindd should be used on a Samba PDC in order
to handle users/groups from trusted domains.




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/qUXIIR7qMdg1EfYRAnGZAJ914DrS54QT/3NDgpMZqt15UbD1dgCdF4uu
t6wBar8oQmh4vBMvI3UqUSI=fCbA
-----END PGP SIGNATURE-----