Vincent Commarieu
2006-Mar-09 04:03 UTC
[Samba] Samba, Winbind and AD. Nearly there but not quite
Hi, Just compiled latest version of samba and trying to get Samba to work with AD. I am at the point where I wbinfo -t, wbinfo -u, wbinfo -g and wbinfo -ausername%password work, but I cannot get getent passwd and getent group to gather any AD info. I have noticed the following errors in /var/log/samba/smbd.log [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Users !? [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Guests !? [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Account Operators !? [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Server Operators !? [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Print Operators !? [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Backup Operators !? [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Replicator !? [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Pre-Windows 2000 Compatible Access !? [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Administrators !? I tried to google to find out more, but no luck. Also I cannot browse the server share from a XP client. Would someone got any idea? Thanks Vincent
Thomas Limoncelli
2006-Mar-09 09:47 UTC
[Samba] Samba, Winbind and AD. Nearly there but not quite
Vincent Commarieu wrote:> I am at the point where I wbinfo -t, wbinfo -u, wbinfo -g and wbinfo > -ausername%password work, but I cannot get getent passwd and getent > group to gather any AD info.We'd need to see your global smb.conf settings (especially those related to winbind and idmap) as well as the output of 'grep winbind /etc/nsswitch.conf'. -TL
Guenther Deschner
2006-Mar-09 14:28 UTC
[Samba] Samba, Winbind and AD. Nearly there but not quite
Hi Vincent, On Thu, Mar 09, 2006 at 05:02:50PM +1300, Vincent Commarieu wrote:> Hi, > > Just compiled latest version of samba and trying to get Samba to work with AD. > > I am at the point where I wbinfo -t, wbinfo -u, wbinfo -g and wbinfo > -ausername%password work, but I cannot get getent passwd and getent > group to gather any AD info. > > I have noticed the following errors in /var/log/samba/smbd.log > > [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) > No rid for Users !? > [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) > No rid for Guests !? > [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) > No rid for Account Operators !? > [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) > No rid for Server Operators !? > [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) > No rid for Print Operators !? > [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) > No rid for Backup Operators !? > [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) > No rid for Replicator !? > [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) > No rid for Pre-Windows 2000 Compatible Access !? > [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) > No rid for Administrators !?You can ignore those. They were builtin (alias) groups from AD showing up the group enumeration code in winbindd. This is long fixed in newer versions of samba. Guenther -- G?nther Deschner GPG-ID: 8EE11688 Novell / SUSE LINUX gd@suse.de Samba Team gd@samba.org -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/20060309/1e6d5973/attachment.bin