samba - Feb 2017 - wbinfo -i returns the same id for all users, authentication doesn't seem to go through winbind at all

On Sat, 18 Feb 2017 18:31:16 +0100
Emmanuel Florac <eflorac at intellique.com> wrote:
> Le Sat, 18 Feb 2017 17:03:33 +0000
> Rowland Penny via samba <samba at lists.samba.org> écrivait:
> 
> > On Sat, 18 Feb 2017 17:41:06 +0100
> > Emmanuel Florac <eflorac at intellique.com> wrote:
> > 
> > > 
> > > OK, but getent and id return with error (id: no such user,
getent:
> > > return code 2). On the systems I've previously set up
similarly
> > > (Wheezy/Samba 3.6), id and getent work.
> > >  
> > 
> > Is this before or after you tried my proposed smb.conf ?
> >  
> 
> # smbstatus
> 
> Samba version 4.2.14-Debian
> PID     Username      Group         Machine            Protocol
> Version
>
------------------------------------------------------------------------------
> 23015     -1            -1            192.168.138.19
> (ipv4:192.168.138.19:37058) NT1
> 
> Service      pid     machine       Connected at
> -------------------------------------------------------
> 
> No locked files
> 
> OK, so I've set it up exactly as per your example. I've changed 
"map
> to guest" to "Never", and then I can't login anymore
even with
> smbclient (well it sort of freezes):
> 
> # smbstatus
> 
> Samba version 4.2.14-Debian
> PID     Username      Group         Machine            Protocol
> Version
>
------------------------------------------------------------------------------
> 23015     -1            -1            192.168.138.19
> (ipv4:192.168.138.19:37058) NT1
> 
> Service      pid     machine       Connected at
> -------------------------------------------------------
> 
> No locked files
> 
> So that's the "map to guest" that maps everyone to nobody. So
it looks
> like not even samba authorization goes through winbind. I don't
> understand at all what's happening...
> 
> 
Is 'winbind' installed and running ?

Rowland

Le Sat, 18 Feb 2017 17:37:25 +0000
Rowland Penny via samba <samba at lists.samba.org> écrivait:
> Is 'winbind' installed and running ?
> 
Yes it is. Isn't "wbinfo" supposed to go through winbind anyway?
'wbinfo -i TESTAD\\testuser' always returned something...

-- 
------------------------------------------------------------------------
Emmanuel Florac     |   Direction technique
                    |   Intellique
                    |	<eflorac at intellique.com>
                    |   +33 1 78 94 84 02
------------------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: Signature digitale OpenPGP
URL:
<http://lists.samba.org/pipermail/samba/attachments/20170218/a1193a88/attachment.sig>

On Sat, 18 Feb 2017 19:52:35 +0100
Emmanuel Florac <eflorac at intellique.com> wrote:
> Le Sat, 18 Feb 2017 17:37:25 +0000
> Rowland Penny via samba <samba at lists.samba.org> écrivait:
> 
> > Is 'winbind' installed and running ?
> > 
> 
> Yes it is. Isn't "wbinfo" supposed to go through winbind
anyway?
> 'wbinfo -i TESTAD\\testuser' always returned something...
> 
Yes, but you seem to have everything set up correctly and still doesn't
work.

I use Devuan and compile Samba myself and it just works.

I will set up debian in a VM and install the OS Samba packages and see
if I have problems, bear with me ;-)

Rowland