Guillermo Gutierrez
2007-Dec-05 23:43 UTC
FW: [Samba] 3.0.27a, ubuntu server7.10 auth issues
Whoops, forgot to copy to the list Guillermo Gutierrez _________________________ (818) 575-2017 (818) 324-0871 ggutierrez@marketscan.com -----Original Message----- From: Guillermo Gutierrez Sent: Wednesday, December 05, 2007 3:24 PM To: 'Max Le?n' Subject: RE: [Samba] 3.0.27a, ubuntu server7.10 auth issues Interesting...i didn't have the idmap setting in there previously and it still didn't work. I will try using the idmap backend. Does using winbind the way that I have it setup still work in this version? Guillermo Gutierrez _________________________ (818) 575-2017 (818) 324-0871 ggutierrez@marketscan.com -----Original Message----- From: Max Le?n [mailto:mleon@wirewatchers.com] Sent: Wednesday, December 05, 2007 3:14 PM To: Guillermo Gutierrez Cc: samba@lists.samba.org Subject: Re: [Samba] 3.0.27a, ubuntu server7.10 auth issues Well none of the options on your conf file seem to be wrong, however some of them might been stepping over each other toes. For instance, in my experience: You either use de the idmap backend or the idmap gid and uid and the winbind enum groups and users, due the fact that you are running the latest version of samba I recommend to use the idmap backend one. That might be what is causing the conflict. Regards, Max. Guillermo Gutierrez wrote:> I don't mean to sound whiny, but I really would like to get some help > figuring this thing out. > I am including my smb.conf as well: > > #======================= Global Settings ======================> > [global] > ## Browsing/Identification ### > netbios name = Maximus > workgroup = MARKETSCAN > realm = MARKETSCAN.COM > server string = %h server (Samba %v, Ubuntu) > dns proxy = no > name resolve order = lmhosts host wins bcast > > #### Networking #### > interfaces = 127.0.0.0/8 eth0 > bind interfaces only = true > > #### Debugging/Accounting #### > log file = /var/log/samba/log.%m > max log size = 1000 > syslog = 0 > panic action = /usr/share/samba/panic-action %d > > ####### Authentication ####### > security = ADS > encrypt passwords = true > password server = * > > passdb backend = tdbsam > obey pam restrictions = yes > invalid users = root > > passwd program = /usr/bin/passwd %u > passwd chat = *Enter\snew\sUNIX\spassword:* %n\n > *Retype\snew\sUNIX\spassword:* %n\n > *passwd:*password\supdated\ssuccessfully* . > > ############ Misc ############ > socket options = TCP_NODELAY > domain master = no > > idmap uid = 10000-20000 > idmap gid = 10000-20000 > idmap backend = idmap_rid:MARKETSCAN=10000-20000 > template shell = /bin/bash > template home dir = /home/MARKETSCAN/%U > winbind enum groups = yes > winbind enum users = yes > winbind use default domain = yes > > #======================= Share Definitions ======================> [homes] > comment = Home Directories > browseable = no > vfs object = readahead > inherit permissions = yes > nt acl support = yes > valid users = %D/%U > writable = yes > create mask = 0700 > directory mask = 0700 > > [printers] > comment = All Printers > browseable = no > path = /var/spool/samba > printable = yes > public = no > writable = no > create mode = 0700 > > [print$] > comment = Printer Drivers > path = /var/lib/samba/printers > browseable = yes > read only = yes > guest ok = no > > [public] > comment = Public Share on %h > path = /home/samba/public > writeable = yes > inherit permissions = yes > nt acl support = yes > create mask = 0775 > directory mask = 0775 > vfs object = readahead > > Guillermo Gutierrez > _________________________ > (818) 575-2017 > (818) 324-0871 > ggutierrez@marketscan.com > > -----Original Message----- > From: samba-bounces+ggutierrez=marketscan.com@lists.samba.org > [mailto:samba-bounces+ggutierrez=marketscan.com@lists.samba.org] On > Behalf Of Guillermo Gutierrez > Sent: Tuesday, December 04, 2007 5:09 PM > To: samba@lists.samba.org > Subject: [Samba] 3.0.27a, ubuntu server7.10 auth issues > > I have upgraded to version 3.0.27a on ubuntu 7.10 server and now the > getent command wont display the active directory users, but wbinfo will. > > It worked fine with 3.0.26a and I have not changed my configuration. > > > > I do however have this in my winbind log: > > > > [2007/12/04 13:39:01, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:39:01, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:44:09, 1] nsswitch/winbindd_ads.c:query_user_list(209) > > Not a user account? atype=0x30000000 > > [2007/12/04 13:44:09, 1] nsswitch/winbindd_ads.c:query_user_list(209) > > Not a user account? atype=0x30000000 > > [2007/12/04 13:44:09, 1] nsswitch/winbindd_ads.c:query_user_list(209) > > Not a user account? atype=0x30000000 > > [2007/12/04 13:44:09, 1] nsswitch/winbindd_ads.c:query_user_list(209) > > Not a user account? atype=0x30000000 > > [2007/12/04 13:44:09, 1] nsswitch/winbindd_ads.c:query_user_list(209) > > Not a user account? atype=0x30000000 > > [2007/12/04 13:44:18, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:44:18, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:45:34, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:45:34, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:45:54, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:46:19, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:46:19, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:46:19, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:49:35, 1] nsswitch/winbindd_ads.c:query_user_list(209) > > Not a user account? atype=0x30000000 > > [2007/12/04 13:49:35, 1] nsswitch/winbindd_ads.c:query_user_list(209) > > Not a user account? atype=0x30000000 > > [2007/12/04 13:49:35, 1] nsswitch/winbindd_ads.c:query_user_list(209) > > Not a user account? atype=0x30000000 > > [2007/12/04 13:49:35, 1] nsswitch/winbindd_ads.c:query_user_list(209) > > Not a user account? atype=0x30000000 > > [2007/12/04 13:49:35, 1] nsswitch/winbindd_ads.c:query_user_list(209) > > Not a user account? atype=0x30000000 > > [2007/12/04 13:49:42, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:49:42, 0] nsswitch/winbindd.c:request_len_recv(544) > > request_len_recv: Invalid request size received: 2084 (expected 2088) > > [2007/12/04 13:50:17, 1] nsswitch/winbindd.c:main(990) > > winbindd version 3.0.27a started. > > Copyright Andrew Tridgell and the Samba Team 1992-2007 > > [2007/12/04 13:50:17, 0] > nsswitch/winbindd_cache.c:initialize_winbindd_cache(2222) > > initialize_winbindd_cache: clearing cache and re-creating with version > number 1 > > > > any ideas? > > > > Guillermo Gutierrez > > Network Administrator > > Market Scan Information Systems, Inc. > > _______________________________________ > > (818) 575-2017 > > (818) 324-0871 > > ggutierrez@marketscan.com > > > >
Reasonably Related Threads
Wisdom of the Ancients
