samba - Jan 2005 - Multiple winbindd processes

Hi,

My problem is that I'd like to have one GNU/Linux box with Samba installed 
serve multiple domains.

I have 2 Domains separated from each other. Connected Samba box to both 
domains and joined them successfully. Running 2 smbd and 2 nmbd processes 
bound to the appropreate network interface, with different settings serving 
appropreate domans.

Samba server is visible in both networks but here is the problem. I can start 
2 winbindd processes for each domain controller, but only one is actually 
working. So only users from that one are able to authenticate. Using
'lsof'
showed that both winbindd processes are connected to the pipe, but only the 
last one started is actually listening to requests?

The question is, what do I need to do to make 2 winbindd processes work 
simultaneously? Is there a solution available, or I will need to write a 
patch for winbind?

TIA,

-- 
[vl@dimir]#

Hi, 

I had posted in the technical list about this sometime back. However, I 
don't think anything was available at that time, so I went ahead and wrote 
a small patch that allows multiple winbindd process to run at the same 
time :) . What it does is to create a seperate pipe for each winbindd 
process. However, this would need a patch for the nss library as well and 
I've only worked out a patch for the linux nss library. I'd also added a
couple of extra parameters to the smb.conf file that allowed for 
specification of a list of domains that could be veto-ed or allowed. I 
could send you the patch if you're interested. 

Sridhar





Vladimir Levijev <dimir@rul0r.com>
Sent by: samba-bounces+sridhar.venkatakrishnan=trilogy.com@lists.samba.org
10/01/2005 11:10 PM

 
        To:     samba@lists.samba.org
        cc: 
        Subject:        [Samba] Multiple winbindd processes



Hi,

My problem is that I'd like to have one GNU/Linux box with Samba installed 

serve multiple domains.

I have 2 Domains separated from each other. Connected Samba box to both 
domains and joined them successfully. Running 2 smbd and 2 nmbd processes 
bound to the appropreate network interface, with different settings 
serving 
appropreate domans.

Samba server is visible in both networks but here is the problem. I can 
start 
2 winbindd processes for each domain controller, but only one is actually 
working. So only users from that one are able to authenticate. Using 
'lsof' 
showed that both winbindd processes are connected to the pipe, but only 
the 
last one started is actually listening to requests?

The question is, what do I need to do to make 2 winbindd processes work 
simultaneously? Is there a solution available, or I will need to write a 
patch for winbind?

TIA,

-- 
[vl@dimir]#
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Hi all,

I have a samba server that authenticates users against a AD Domain controler
on a different machine and everything works fine.  However, i would find
ever so often this machine would stop authenticating people for now apparent
reason.  Usually i would restart winbind, and samba and everything would
start working but even that seems not to work anymore.  Are there any other
processess i should be stopping/starting/restarting to have my samba server
talk to the DC again?

Regards,
R.

MORE INFO:

I just noticed that in my samba logs when i get a user that is denied access
to my share i get and error message similar to:
smbd/service.c:reply_spnego_kerberos(250)
Username Domain+Machinename is invalid on this system

Why is this happeneing?  Why is it specifying the machine name and not the
username?  My understanding is that my machine should contact the DC and
pass the authentication info to the DC for access.  Why isnt this happening?

----- Original Message ----- 
From: "Rashaad S. Hyndman" <IslandBwoy@ToughGuy.net>
To: <samba@lists.samba.org>
Sent: Wednesday, January 12, 2005 1:35 PM
Subject: [Samba] Samba ADS

> Hi all,
>
> I have a samba server that authenticates users against a AD Domain
controler
> on a different machine and everything works fine.  However, i would find
> ever so often this machine would stop authenticating people for now
apparent
> reason.  Usually i would restart winbind, and samba and everything would
> start working but even that seems not to work anymore.  Are there any
other
> processess i should be stopping/starting/restarting to have my samba
server
> talk to the DC again?
>
> Regards,
> R.
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba