Hi List.
I have successfully used winbindd, with squid to act as a reverse proxy
for a webmail product. I initally tested and set up this system in our
own LAN. This had the squid box, running winbindd, on the same LAN as
our Win2k DC. Everything works fine.
Now, once I came to install this system in the real world, I have run
into some problems. I have compiled Samba 2.2.7a from source with the
--use-winbindd configure option. I am running this on RH 9. Once made
and installed, I ran 'smbpasswd -j DOMAIN -r PDC -U Administrator', and
apparently joined the domain successfully.
I cant use wbinfo to ping, check secrets or view users or groups. I can
ping to the password/WINS server from the winbindd box in the DMZ.
This is a snippet from log.winbindd:
- - SNIP - -
[2003/10/13 15:40:14, 1] nsswitch/winbindd_util.c:init_domain_list(144)
Retrying startup domain sid fetch for PORTADOWN
[2003/10/13 15:40:14, 3] nsswitch/winbindd_cm.c:cm_get_dc_name(103)
Could not look up dc's for domain PORTADOWN
[2003/10/13 15:40:14, 10]
nsswitch/winbindd_cm.c:add_failed_connection_entry(236)
domain PORTADOWN already tried and failed
[2003/10/13 15:40:14, 3]
nsswitch/winbindd_cm.c:get_connection_from_cache(411)
Could not open a connection to PORTADOWN for \PIPE\lsarpc
(NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)
- - SNIP - -
And some smb.conf info:
- - SNIP - -
workgroup = PORTADOWN
netbios name = INOTES
name resolve order = wins lmhosts bcast
wins server = 10.1.1.10
password server = 10.1.1.10
security = DOMAIN
guest ok = yes
dns proxy = no
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind use default domain = yes
- - SNIP - -
I have noticed that our office implementation, which joins a 2k domain,
winbind is connected to mircosoft-ds on the password server. An
interesting fact is that there is no microsoft-ds service running on the
NT4 password server (10.1.1.10). Is this a problem? What needs done on
the NT server to fix?
I also have played with nsswitch/winbindd_cm.c, but have had no luck, as
my C skills are somewhat embarrassing.
Any help or pointers greatly appriciated.
Cheers,
Andrew
--
andrew (at) mongers (dot) org
