Marcelin Bruno
2005-Jun-10 08:26 UTC
[Samba] Problems with authenticating linux against Windows 2000 Active Directory
Hi, I am trying to authenticating Linux (Debian) against Windows 2000 Active Directory. It works but i have errors in winbindd logs. This is how my Active Directory Forest is organized : myCompany.com Site1.myCompany.com Site2.myCompany.com Site3.myCompany.com ... SiteX.myCompany.com I am in the site1 and samba speaks with all the other sites. Why? How to prevent that? This my configuration files and the log file ######## Smf.conf ############# workgroup = SITE1 realm = SITE1.MYCOMPANY.COM security = ADS obey pam restrictions = Yes password server = PasswordServerName passdb backend = tdbsam, guest passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . log file = /var/log/samba/log.%m max log size = 1000 name resolve order = lmhosts host bcast dns proxy = No idmap uid = 500-10000000 idmap gid = 500-10000000 template homedir = /home/%U template shell = /bin/bash winbind use default domain = Yes winbind nested groups = Yes invalid users = root ########## krb5.conf ############ [libdefaults] default_realm = SITE1.MYCOMPANY.COM dns_lookup_realm = false [realms] SITE1.MYCOMPANY.COM= { kdc = kdc.SITE1.MYCOMPANY.COM } [domain_realm] .site1.mycompany.com=SITE1.MYCOMPANY.COM ########## log.winbindd ########## ads_krb5_mk_req: krb5_get_credentials failed for server$@SITE2.MYCOMPANY.COM (Cannot resolve network address for KDC in requested realm) [2005/06/10 10:10:50, 1] nsswitch/winbindd_ads.c:ads_cached_connection(81) ads_connect for domain SITE2-NBT failed: Cannot resolve network address for KDC in requested realm [2005/06/10 10:10:51, 1] libsmb/clikrb5.c:ads_krb5_mk_req(389) ads_krb5_mk_req: krb5_get_credentials failed for server$@SITE3.MYCOMPANY.COM (Cannot resolve network address for KDC in requested realm) [2005/06/10 10:10:51, 1] libsmb/clikrb5.c:ads_krb5_mk_req(389) ads_krb5_mk_req: krb5_get_credentials failed for server$@SITE3.MYCOMPANY.COM (Cannot resolve network address for KDC in requested realm) [2005/06/10 10:10:51, 1] nsswitch/winbindd_ads.c:ads_cached_connection(81) ads_connect for domain SITE3 failed: Cannot resolve network address for KDC in requested realm [2005/06/10 10:10:51, 1] libsmb/clikrb5.c:ads_krb5_mk_req(389) ads_krb5_mk_req: krb5_get_credentials failed for server$@SITE4.MYCOMPANY.COM (Cannot resolve network address for KDC in requested realm) [2005/06/10 10:10:51, 1] libsmb/clikrb5.c:ads_krb5_mk_req(389) ads_krb5_mk_req: krb5_get_credentials failed for server$@SITE4.MYCOMPANY.COM (Cannot resolve network address for KDC in requested realm) [2005/06/10 10:10:51, 1] nsswitch/winbindd_ads.c:ads_cached_connection(81) ads_connect for domain SITE4-NBT failed: Cannot resolve network address for KDC in requested realm Any Ideas? Bruno