Hi All, I am having trouble with winbind. I have samba sucessfully looking up users from an AD domain. wbinfo -u and wbinfo -g return users appropriatley. However wbinfo -r joeblow returns: Could not get groups for user joeblow Below is the information that is present in the logs: [2006/05/04 11:45:37, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupname(695) [23088]: lookupname MYDOMAIN\joeblow [2006/05/04 11:45:37, 3] nsswitch/winbindd_async.c:winbindd_dual_getsidaliases(885) [23088]: getsidaliases [2006/05/04 11:45:37, 3] nsswitch/winbindd_async.c:winbindd_dual_getsidaliases(909) Could not lookup_useraliases: NT_STATUS_ACCESS_DENIED Any ideas? I am using samba v3.0.22 -- Adam Cassar ICT Manager NetRegistry Pty Ltd ______________________________________________ http://www.netregistry.com.au Tel: 02 9699 6099 Fax: 02 9699 6088 PO Box 270 Broadway NSW 2007 Domains |Business Email|Web Hosting|E-Commerce Trusted by 10,000s of businesses since 1997 ______________________________________________
On Thu, May 04, 2006 at 01:33:13PM +1000, Adam Cassar wrote:> [2006/05/04 11:45:37, 3] > nsswitch/winbindd_async.c:winbindd_dual_lookupname(695) > [23088]: lookupname MYDOMAIN\joeblow > [2006/05/04 11:45:37, 3] > nsswitch/winbindd_async.c:winbindd_dual_getsidaliases(885) > [23088]: getsidaliases > [2006/05/04 11:45:37, 3] > nsswitch/winbindd_async.c:winbindd_dual_getsidaliases(909) > Could not lookup_useraliases: NT_STATUS_ACCESS_DENIED > > Any ideas? I am using samba v3.0.22This can only work if user joeblow has logged in with his username/password. Asking for memberships of a user that has not logged in will never reliably work with Windows. Volker -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/20060504/4c5958a1/attachment.bin