samba - Aug 2006 - Winbind not looking in correct Win2k3 SBS User container

Hi,

We've recently upgraded a network from Win2k to 2k3 SBS. We were using
samba with security = domain (which I believe stopped working - I was on
vacation at the time the upgrade was done) and are now using security ads.

We're using samba-3.0.23b-0.1.35 on SuSE Enterprise Linux Server 9 SP3
x86_64

The samba machine has been sucessfully joined to the domain with:
kinit Administrator@DOMAIN.COM
net ads join

Winbind is able to spit out a list of users, but it appears to be
listing *only* users found in the DOMAIN.COM\MyBusiness\Users\SBSUsers
container, rather than DOMAIN.COM\Users (which is where all the old
users are).

Obviously this is breaking access to the shares, as samba isn't able to
authenticate users - it's only showing:
DOMAIN+mobile user tmpl
DOMAIN+user tmpl
DOMAIN+power user tmpl
DOMAIN+administrator tmpl
DOMAIN+sbs backup user
DOMAIN+sbs sts worker
DOMAIN+2977d187-eb4c-458a-a

If we add a user in the SBSUsers container, it shows up in the winbind
list. If we add a user to the old Users location it doesn't show up.

Does anyone have any suggestions as to why it's behaving like this?

Best regards,

Matt London

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Matt London wrote:
> Hi,
> 
> We've recently upgraded a network from Win2k to 2k3 SBS. 
> We were using samba with security = domain (which
> I believe stopped working - I was on vacation at the
> time the upgrade was done) and are now using security > ads.
...
> If we add a user in the SBSUsers container, it 
> shows up in the winbind list. If we add a user to
> the old Users location it doesn't show up.
> 
> Does anyone have any suggestions as to why it's 
> behaving like this?
We just pickup users from the default users OU.
Seems like SBS2k3 changed the default location.
Can you set some domain GPO to change this?




cheers, jerry
====================================================================Samba       
------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE7JlvIR7qMdg1EfYRAmMuAJoCE85JBDen3jUbpclNdnpTrWJlHQCdEcIw
5oI+ZwcJC4hGy4DuL1U8mEU=pUpc
-----END PGP SIGNATURE-----