subramanian.ponnusamy@iflexsolutions.com
2004-Jan-23 12:43 UTC
[Samba] getent passwd problem (please it's quite URGENT)
Hi, My ultimate goal is to use this samba installation as a member server without having to maintain NT user accounts on the samba box. I have installed samba-3.0.1 in three Red Hat 9.0 machines installation went through fine. My configuration options for Samba were the following: ./configure --with-winbind --with-winbind-auth-challenge --with-pam --with-acl-support --with-ldapsam --with-pam_smbpass --with-ads --with-ldap --with-dce-dfs --with-afs --with-smbwrapper [root@fileserver bin]# ./wbinfo -ug RAHEJA+sysfmg RAHEJA+Guest RAHEJA+TsInternetUser RAHEJA+IUSR_IFLEXPPSERVER-3 RAHEJA+IWAM_IFLEXPPSERVER-3 RAHEJA+administrator RAHEJA+krbtgt RAHEJA+B8D03373-F7A1-4033-8 RAHEJA+newu RAHEJA+user1 RAHEJA+user2 RAHEJA+user3 RAHEJA+subbu RAHEJA+Domain Computers RAHEJA+Domain Controllers RAHEJA+Schema Admins RAHEJA+Enterprise Admins RAHEJA+Cert Publishers RAHEJA+Domain Admins RAHEJA+Domain Users RAHEJA+Domain Guests RAHEJA+Group Policy Creator Owners RAHEJA+RAS and IAS Servers RAHEJA+DnsAdmins RAHEJA+DnsUpdateProxy RAHEJA+Exchange Domain Servers RAHEJA+Exchange Enterprise Servers RAHEJA+DL [root@fileserver bin]# ./wbinfo -t checking the trust secret via RPC calls succeeded [root@fileserver bin]# ./ntlm_auth --username=subbu password: NT_STATUS_OK: Success (0x0) I get the following errors with some wbinfo tests: wbinfo -a subbu%subbu plaintext password authentication failed error code was NT_STATUS_INVALID_PARAMETER (0xc000000d) Could not authenticate user <user>%<password> with plaintext password challenge/response password authentication succeeded getent passwd and getent group shows only local accounts is not displaying any AD users/groups But if i give [root@fileserver bin]# getent passwd RAHEJA.COM+subbu RAHEJA.COM+subbu:x:10000:10000:subbu:/home/subbu:/bin/false /home/subbu not created... i am not able to access the shares... herewith i am attaching my smb.conf and krb.conf and nsswitch.conf What may be going wrong? Do i need to modiy any pam.d settings... <<krb5.conf>> <<nsswitch.conf>> <<smb.conf>> . Thanks in advance, Subbu DISCLAIMER: This message contains privileged and confidential information and is intended only for the individual named.If you are not the intended recipient you should not disseminate,distribute,store,print, copy or deliver this message.Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted,corrupted,lost,destroyed,arrive late or incomplete or contain viruses.The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version.
Andrew Bartlett
2004-Jan-23 21:31 UTC
[Samba] getent passwd problem (please it's quite URGENT)
On Fri, 2004-01-23 at 23:52, subramanian.ponnusamy@iflexsolutions.com wrote:> Hi, > > My ultimate goal is to use this samba installation as a member > server without having to maintain NT user accounts on the samba > box.> /home/subbu not created...It is not winbind's role to create home directories. Either pam_mkhomedir, the 'add user script' in smbd (I think), or manual scripts on your part must handle this. Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20040124/0d45ea21/attachment.bin