[Samba] Need help with winbind

Jan van Rensburg
Fri, 01 Mar 2002 06:42:10 -0000

Hi,
I've been trying for some time now to get winbind working on Solaris,
without success. I'd really appreciate some help. I've tried various
ways to get this working, but I'll only describe one method that's
recommended been recommended on the list, but still fails for me. I've
followed the winbind documents to the letter. I think the problem might
be with permissions on the w2k server, but I'm not sure.

Setup: Solaris 8, Win2k ADS DC, samba 2.2.3a compiled with gcc 2.95.3
and also tested with gcc 3.0.3.

I create an account on the ADS server (GA - 10.5.1.3) for the Solaris
machine (SRVSUN - 10.5.3.6), and check the "Allow pre win 2000
computers" box. I delete everything in /opt/samba/private.

I'm 100% sure that name resolution works fine.

Now on the sun server I try to join the domain:
$ smbpasswd -j us-epiuse-com
fetch_domain_sid: machine GA rejected the tconX on the IPC$ share. Error
was : NT_STATUS_ACCESS_DENIED.
Failed to get domain SID. Unable to join domain US-EPIUSE-COM.

So why does this happen? According to everyone else this is supposed to
work. I've tried enabling the guest account on the w2k server, but it
makes no difference.

So, on to plan 2. I will give it the account of the w2k admin:
$ smbpasswd -j us-epiuse-com -r GA -U w2kadmin
Password:
Joined domain US-EPIUSE-COM.

And all looks well. However when I start nmbd and then winbindd I get
the following error in the winbind log: "Could not connect to a dc for
domain US-EPIUSE-COM".

I'd really appreciate any help.

Regards,
Jan van Rensburg