Hi All, I am currently weaving samba into an active directory domain. ntlm works fine. but wbinfo is not so good. wbinfo -r username returns Could not get groups for user username wbinfo -n username returns S-1-5-21-1482476501-343818398-682003330-6830 User (1) wbinfo -a username%password plaintext password authentication failed error code was NT_STATUS_NO_SUCH_USER (0xc0000064) error messsage was: No such user Could not authenticate user username%password with plaintext password challenge/response password authentication succeeded wbinfo -s S-1-5-21-1482476501-343818398-682003330-6830 returns DOMAIN\username 1 wbinfo -S S-1-5-21-1482476501-343818398-682003330-6830 returns Could not convert sid S-1-5-21-1482476501-343818398-682003330-6830 to uid I have been trawling the net for a few days now and though i see the problems out there the solutions they posted did not work for me. FC5 Windows 2000 ADS Any help greatly recieved Simon
What does /etc/nsswitch.conf have in it? On 11 Apr 2006, at 22:23, simon chap wrote:> Hi All, > > I am currently weaving samba into an active directory domain. > > ntlm works fine. but wbinfo is not so good. > > wbinfo -r username > returns > Could not get groups for user username > > wbinfo -n username > returns > S-1-5-21-1482476501-343818398-682003330-6830 User (1) > > wbinfo -a username%password > plaintext password authentication failed > error code was NT_STATUS_NO_SUCH_USER (0xc0000064) > error messsage was: No such user > Could not authenticate user username%password with plaintext password > challenge/response password authentication succeeded > > wbinfo -s S-1-5-21-1482476501-343818398-682003330-6830 > returns > DOMAIN\username 1 > > > wbinfo -S S-1-5-21-1482476501-343818398-682003330-6830 > returns > Could not convert sid S-1-5-21-1482476501-343818398-682003330-6830 to > uid > > I have been trawling the net for a few days now and though i see the > problems out there the solutions they posted did not work for me. > > FC5 > Windows 2000 ADS > > Any help greatly recieved > > Simon > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba >
On Tue, Apr 11, 2006 at 01:23:49PM +0100, simon chap wrote:> wbinfo -a username%password > plaintext password authentication failed > error code was NT_STATUS_NO_SUCH_USER (0xc0000064)Try wbinfo -a domain\\username%password Volker -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/20060411/2a94e6bc/attachment.bin
Hello, I have an issue with (what I believe is) winbind, everything is working fine except it does not seem to recognise group membership changes properly. I have 2 domain controllers (W2K AD), I have tried waiting for replication (waited over 3 hrs), I have also tried forcing replication. I have searched google, mail lists etc and nothing I have tried seems to work, I have also tried turning off the winbind cache (-n) but to no avail. I am using this with Squid with the following smd.conf: workgroup=[not shown - my domain name] password server = [not shown - my pdc name] security = domain winbind uid = 10000-20000 winbind gid = 10000-20000 winbind use default domain = yes winbind cache time = 2 Any help would be greatly appreciated. Thankyou Andrew Jackman ------Disclaimer------ "The information transmitted in this email is intended only for the person or entity to which it was addressed. This email may contain confidential or privileged information. If you are not the intended recipient, any use, reproduction, dissemination, re-transmission or action taken in reliance on this Email is strictly prohibited. If you have received this Email in error, please contact the sender and delete this material from your computer. The organization will not accept any liability for materials transmitted via the Internet that are intentionally or unintentionally offensive to the reader. This Email must not be forwarded to others unless expressly authorised in this Email. Any reply to this Email must only be to the author, unless reply to others is expressly authorised in this Email."
> I have an issue with (what I believe is) winbind, everything is > working fine except it does not seem to recognise group membership > changes properly. > > Any help would be greatly appreciated.Did you try restarting Samba/winbindd/Squid? I found that with security=domain Samba would not recognise membership changes until after I restarted it (the problem seemed to go away when I changed to security=ads.) Cheers, Adam.