samba - Jul 2009 - winbind and getent

Hi,

I have a samba share on centos5 that uses AD authentication.  I can do
wbinfo -u and it returns the AD users.. but getent only returns the local
centos users.

Any pointers on where i have gone wrong?

I am trying to chown to an AD user/group, but it is now working..  is the
format chown domain\user:domain\group path/to/file ?

Thanks..

i had the same problem with samba 3.0.28a on ubuntu and nobody could
answer me what's worng...

so.. if you find a solution, please let me know.

i have no resolution..

gabi

On Wed, Jul 29, 2009 at 1:33 PM, tsg<tsg.samba at gmail.com>
wrote:
> Hi,
>
> I have a samba share on centos5 that uses AD authentication. ?I can do
> wbinfo -u and it returns the AD users.. but getent only returns the local
> centos users.
>
> Any pointers on where i have gone wrong?
>
> I am trying to chown to an AD user/group, but it is now working.. ?is the
> format chown domain\user:domain\group path/to/file ?
>
> Thanks..
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: ?https://lists.samba.org/mailman/options/samba
>

Hi Volker,

Yes  in smb.conf i have:
        winbind enum users = Yes
        winbind enum groups = Yes

Have you configured your /etc/krb5.conf file?

 



------------------------------------------------------------------------
Tony Hoover, Network Administrator
KSU - Salina, College of Technology and Aviation
(785) 826-2660

"Don't Blend in..."
------------------------------------------------------------------------
 
-----Original Message-----
From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
On Behalf Of Gabriel Petrescu
Sent: Thursday, July 30, 2009 8:39 AM
To: John Stile
Cc: samba at lists.samba.org
Subject: Re: [Samba] winbind and getent

hi:)

in my case it's working:
> wbinfo Shows winbind is doing lookups from ADS
>  wbinfo -u
>  wbinfo -g
>  wbinfo -a mydomain+myuser%mypassword
and i get an error here:

 kinit tests
kinit(v5): Client not found in Kerberos database while getting initial
credentials


any advice here?

gabi

On Wed, Jul 29, 2009 at 6:58 PM, John Stile<john at stilen.com>
wrote:
> On Wed, 2009-07-29 at 22:33 +1000, tsg-samba wrote:
>> Hi Volker,
>>
>> Yes ?in smb.conf i have:
>> ? ? ? ? winbind enum users = Yes
>> ? ? ? ? winbind enum groups = Yes
>
> getent Shows nsswitch is correct, to resolve ADS users and groups.
> ?getent passwd
> ?getent group
>
> wbinfo Shows winbind is doing lookups from ADS
> ?wbinfo -u
> ?wbinfo -g
> ?wbinfo -a mydomain+myuser%mypassword
>
> kinit tests if kerberose can authenticate
> ?kinit myuser
>
> If 'wbinfo -g' shows ? MYDOMAIN+Domain Users,
> maybe your share should have a line like:
> ?valid users = @"MYDOMAIN+Domain Users"
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: ?https://lists.samba.org/mailman/options/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba