Hi, I'm running a Samba 3.0.32 server on AIX 6.1, AIX is authorizing with secldapclntd to an OpenLDAP Server. The Clients are coming from a Windows 2003 Terminal Server Thin Client session, logged in to the domain. I see in the logs that secldapclntd tries 3 times to authorize using DOMAIN\USER as identification, and then finally uses USER(which works). Is this Samba behavior, or AIX? Is there any way to convince Samba that he should use just the User name for File Access? Thanks
---- Original message ---->Date: Fri, 19 Sep 2008 07:34:39 +0200 >From: Howard Allison <Howard.Allison@pva.sozvers.at> >Subject: [Samba] LDAP user search request includes domain >To: samba@lists.samba.org > >Hi, >I'm running a Samba 3.0.32 server on AIX 6.1, AIX is authorizing with >secldapclntd to an OpenLDAP Server. >The Clients are coming from a Windows 2003 Terminal Server Thin Client >session, logged in to the domain. >I see in the logs that secldapclntd tries 3 times to authorize using >DOMAIN\USER as identification, and then finally uses USER(which works). >Is this Samba behavior, or AIX? Is there any way to convince Samba that >he should use just the User name for File Access? >Thanks >Have you looked at "winbind use default domain" ? Cheers, Bill>-- >To unsubscribe from this list go to the following URL and read the >instructions: https://lists.samba.org/mailman/listinfo/samba
---- Original message ---- >>Date: Fri, 19 Sep 2008 07:34:39 +0200 >>From: Howard Allison <Howard.Allison@pva.sozvers.at> >>Subject: [Samba] LDAP user search request includes domain >>To: samba@lists.samba.org >> >>Hi, >>I'm running a Samba 3.0.32 server on AIX 6.1, AIX is authorizing with >>secldapclntd to an OpenLDAP Server. >>The Clients are coming from a Windows 2003 Terminal Server Thin Client >>session, logged in to the domain. >>I see in the logs that secldapclntd tries 3 times to authorize using >>DOMAIN\USER as identification, and then finally uses USER(which works). >>Is this Samba behavior, or AIX? Is there any way to convince Samba that >>he should use just the User name for File Access? >>Thanks >> >Have you looked at "winbind use default domain" ? Yup, I've used yes and no, doesn't affect the process in the slightest unfortunately...