samba - Mar 2005 - please help....

I've got quite a weird and probably unique situation here.

We have both an Active Directory server and an OpenLDAP
server here. The ADS is for the windows boxes and the LDAP
is for the linux boxes.

My Problem is, there are a few overlapping usernames between
the two (mainly just a handfull of developers).

So I have been running into the problem that samba seems to
authenticate the user and go with the info for the user from
winbind instead of using the info from the ldap for "local"
users.

It's causing me quite a bit of a headache. I tried the sam_ignoredomain
but that doesn't seem to work. Is there any way to make it try just the
username and only try DOMAIN+username if username doesn't exist???

Thanks alot in advance for any help on this.

Doug

> It's causing me quite a bit of a headache. I tried the sam_ignoredomain
> but that doesn't seem to work. Is there any way to make it try just the
> username and only try DOMAIN+username if username doesn't exist???
How is your nsswitch.conf set up?  If it's something like this

passwd:     files winbind ldap
shadow:     files winbind ldap
group:      files winbind ldap

you could always reverse the order of ldap and winbind.  Just a stab in 
the dark since I don't run winbind here, but it would stand to reason 
that it could work the other way.



-- 
Paul Gienger                    Office: 701-281-1884
Applied Engineering Inc.
Systems Architect               Fax:    701-281-1322
URL: www.ae-solutions.com       mailto: pgienger@ae-solutions.com