Hi.
Does anyone have samba 2.2.2 on Solaris 8 working with winbindd?
I have samba 2.2.2 installed and configured --with-winbind and have the
winbindd daemon running but the following does not work:
1. "getent passwd" Solaris command on returns local users (no Domain
users)
2. winbindd authentication to the PDC is not occurring.
3. local users cannot change password since I modified the nsswitch.conf
file
as directed in the HOWTO.
Thanks in advance.
Stephen P. Michaels
BIS Computing Systems Group
The Johns Hopkins University Applied Physics Laboratory
11100 Johns Hopkins Rd.
Laurel, MD. 20723-6099
(443) 778-7527
Hi Steve, I think this is a general problem with Winbind running under Solaris - I get communication to/from our domain controllers and this can be proven by using wbinfo -u and -g (which return a list of domain users). However, I've copied libnss_winbind.so, symbolically linked libnss_winbind.so.1, libnss_winbind.so.2 and nss_winbind.so.1 (that's the one that Solaris actually uses according to the nsswitch.conf man pages) and updated nsswitch.conf so that passwd and group have winbind in them (Solaris doesn't use shadow). And guess what! getent passwd and getent group do not return anything but local users. I've not bothered with PAM yet as I'm trying to get one bit working at a time. Executing truss getent passwd indicates that the nss_winbind.so.1 library is loaded, but it doesn't open up /tmp/.winbindd/pipe (which is owned by root, so that isn't the problem) to pass Winbind its request. I'm running Solaris 2.6, latest CVS (from this morning) and still no joy - does anybody have any ideas here? I can give more info if required. Cheers! Dean Ward Info Systems The Wine Society
Hi Dean; You're right - try editing your Makefile so that the line WINBIND_NSS_OBJ = nsswitch/winbind_nss.o nsswitch/wb_common.o reads: WINBIND_NSS_OBJ = nsswitch/winbind_nss.o nsswitch/wb_common.o nsswitch/winbind_nss_solaris.o Then remove your libnss_winbind.so and make nsswitch again. Hope this helps, Don -----Original Message----- From: Dean Ward [mailto:wardd@thewinesociety.com] Sent: Friday, December 28, 2001 8:32 AM To: 'samba@lists.samba.org' Subject: FW: Re: Help! Solaris 8 + winbindd Hello List, I'm not too up on my Unix programming as I should be, but having just re-compiled the nsswitch directory on a Solaris 2.6 box, it would seem that the winbind_nss_solaris.c source file is never compiled into libnss_winbind.so - could this be why the module does not work on Solaris? If this isn't compiled, I can only presume that the module does not show the correct interface to the Solaris nsswitch subsystem, and therefore Solaris can't call anything within it (?). Cheers, Dean Ward Info Systems The Wine Society> -----Original Message----- > From: Dean Ward > Sent: 27 December 2001 11:55 > To: 'Steve.Michaels@jhuapl.edu' > Cc: 'samba@lists.samba.org' > Subject: Re: Help! Solaris 8 + winbindd > > Hi Steve, > > I think this is a general problem with Winbind running under Solaris - I > get communication to/from our domain controllers and this can be proven by > using wbinfo -u and -g (which return a list of domain users). > > However, I've copied libnss_winbind.so, symbolically linked > libnss_winbind.so.1, libnss_winbind.so.2 and nss_winbind.so.1 (that's the > one that Solaris actually uses according to the nsswitch.conf man pages) > and updated nsswitch.conf so that passwd and group have winbind in them > (Solaris doesn't use shadow). And guess what! getent passwd and getent > group do not return anything but local users. I've not bothered with PAM > yet as I'm trying to get one bit working at a time. > > Executing truss getent passwd indicates that the nss_winbind.so.1 library > is loaded, but it doesn't open up /tmp/.winbindd/pipe (which is owned by > root, so that isn't the problem) to pass Winbind its request. > > I'm running Solaris 2.6, latest CVS (from this morning) and still no joy - > does anybody have any ideas here? I can give more info if required. > > Cheers! > > Dean Ward > Info Systems > The Wine Society-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
That's great, works a treat. Think I'll take some timeout to learn a bit of Unix programming :) Thanks and Happy New Year! Dean Ward Info Systems The Wine Society> -----Original Message----- > From: MCCALL,DON (HP-USA,ex1) [SMTP:don_mccall@hp.com] > Sent: 28 December 2001 16:22 > To: 'Dean Ward'; 'samba@lists.samba.org' > Subject: RE: Re: Help! Solaris 8 + winbindd > > Hi Dean; > You're right - try editing your Makefile so that the line > > WINBIND_NSS_OBJ = nsswitch/winbind_nss.o nsswitch/wb_common.o > reads: > > WINBIND_NSS_OBJ = nsswitch/winbind_nss.o nsswitch/wb_common.o > nsswitch/winbind_nss_solaris.o > > > Then remove your libnss_winbind.so and make nsswitch again. > Hope this helps, > Don > > -----Original Message----- > From: Dean Ward [mailto:wardd@thewinesociety.com] > Sent: Friday, December 28, 2001 8:32 AM > To: 'samba@lists.samba.org' > Subject: FW: Re: Help! Solaris 8 + winbindd > > > Hello List, > > I'm not too up on my Unix programming as I should be, but having just > re-compiled the nsswitch directory on a Solaris 2.6 box, it would seem > that > the winbind_nss_solaris.c source file is never compiled into > libnss_winbind.so - could this be why the module does not work on Solaris? > If this isn't compiled, I can only presume that the module does not show > the > correct interface to the Solaris nsswitch subsystem, and therefore Solaris > can't call anything within it (?). > > Cheers, > > Dean Ward > Info Systems > The Wine Society > > > -----Original Message----- > > From: Dean Ward > > Sent: 27 December 2001 11:55 > > To: 'Steve.Michaels@jhuapl.edu' > > Cc: 'samba@lists.samba.org' > > Subject: Re: Help! Solaris 8 + winbindd > > > > Hi Steve, > > > > I think this is a general problem with Winbind running under Solaris - I > > get communication to/from our domain controllers and this can be proven > by > > using wbinfo -u and -g (which return a list of domain users). > > > > However, I've copied libnss_winbind.so, symbolically linked > > libnss_winbind.so.1, libnss_winbind.so.2 and nss_winbind.so.1 (that's > the > > one that Solaris actually uses according to the nsswitch.conf man pages) > > and updated nsswitch.conf so that passwd and group have winbind in them > > (Solaris doesn't use shadow). And guess what! getent passwd and getent > > group do not return anything but local users. I've not bothered with PAM > > yet as I'm trying to get one bit working at a time. > > > > Executing truss getent passwd indicates that the nss_winbind.so.1 > library > > is loaded, but it doesn't open up /tmp/.winbindd/pipe (which is owned by > > root, so that isn't the problem) to pass Winbind its request. > > > > I'm running Solaris 2.6, latest CVS (from this morning) and still no joy > - > > does anybody have any ideas here? I can give more info if required. > > > > Cheers! > > > > Dean Ward > > Info Systems > > The Wine Society > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba
Hello All, Hopefully this should be my last question(s) before I can start looking into implementing Winbind in a live scenario (hurray!) Firstly, I think there may be a bug in libnss_winbind.so - when performing any operation involving domain accounts (e.g. chown, who am i, su, login, etc.) the following error pops up: ld.so.1: /usr/sbin/quota: fatal: relocation error: file /usr/lib/nss_winbind.so.1: symbol socket: referenced symbol not found Killed (note: nss_winbind.so.1 is linked to libnss_winbind.so). Any ideas? Platform is Solaris 2.6. Secondly, is it possible to authenticate using just the username, i.e. not DOMAIN+UID? If so, what effect would this have on Unix logons with the same username? e.g. I have an account WINESOC+WardD and an account wardd - if I type a password that is correct for the Unix account, but not for the NT account, will I logon with the Unix account? Finally, where on earth can I get hold of pam_mkhome? I've looked high and low and it is nowhere to be found :( Thanks for all your help! Dean Ward Info Systems The Wine Society> -----Original Message----- > From: MCCALL,DON (HP-USA,ex1) [SMTP:don_mccall@hp.com] > Sent: 28 December 2001 16:22 > To: 'Dean Ward'; 'samba@lists.samba.org' > Subject: RE: Re: Help! Solaris 8 + winbindd > > Hi Dean; > You're right - try editing your Makefile so that the line > > WINBIND_NSS_OBJ = nsswitch/winbind_nss.o nsswitch/wb_common.o > reads: > > WINBIND_NSS_OBJ = nsswitch/winbind_nss.o nsswitch/wb_common.o > nsswitch/winbind_nss_solaris.o > > > Then remove your libnss_winbind.so and make nsswitch again. > Hope this helps, > Don > > -----Original Message----- > From: Dean Ward [mailto:wardd@thewinesociety.com] > Sent: Friday, December 28, 2001 8:32 AM > To: 'samba@lists.samba.org' > Subject: FW: Re: Help! Solaris 8 + winbindd > > > Hello List, > > I'm not too up on my Unix programming as I should be, but having just > re-compiled the nsswitch directory on a Solaris 2.6 box, it would seem > that > the winbind_nss_solaris.c source file is never compiled into > libnss_winbind.so - could this be why the module does not work on Solaris? > If this isn't compiled, I can only presume that the module does not show > the > correct interface to the Solaris nsswitch subsystem, and therefore Solaris > can't call anything within it (?). > > Cheers, > > Dean Ward > Info Systems > The Wine Society > > > -----Original Message----- > > From: Dean Ward > > Sent: 27 December 2001 11:55 > > To: 'Steve.Michaels@jhuapl.edu' > > Cc: 'samba@lists.samba.org' > > Subject: Re: Help! Solaris 8 + winbindd > > > > Hi Steve, > > > > I think this is a general problem with Winbind running under Solaris - I > > get communication to/from our domain controllers and this can be proven > by > > using wbinfo -u and -g (which return a list of domain users). > > > > However, I've copied libnss_winbind.so, symbolically linked > > libnss_winbind.so.1, libnss_winbind.so.2 and nss_winbind.so.1 (that's > the > > one that Solaris actually uses according to the nsswitch.conf man pages) > > and updated nsswitch.conf so that passwd and group have winbind in them > > (Solaris doesn't use shadow). And guess what! getent passwd and getent > > group do not return anything but local users. I've not bothered with PAM > > yet as I'm trying to get one bit working at a time. > > > > Executing truss getent passwd indicates that the nss_winbind.so.1 > library > > is loaded, but it doesn't open up /tmp/.winbindd/pipe (which is owned by > > root, so that isn't the problem) to pass Winbind its request. > > > > I'm running Solaris 2.6, latest CVS (from this morning) and still no joy > - > > does anybody have any ideas here? I can give more info if required. > > > > Cheers! > > > > Dean Ward > > Info Systems > > The Wine Society > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba
Reasonably Related Threads
- build samba in 64bit mode
- Samba 2.2.4 make fails on Solaris 8 (Ultra Sparc III) using Sun F orte 6-update 2 compilers
- Samba 2.2.4 make fails on Solaris 8 (Ultra Sparc III) using Sun Forte 6-update 2 compilers
- samba 64 for Solaris
- reversing domain and user name?