We are migrating to 2008 Active Directory and in making changed to
smb.conf and krb5.conf and restarting smb services I get below error in
the winbindd.log:
Winbind won't start
[2011/04/07 15:03:09, 1] nsswitch/winbindd.c:main(979)
winbindd version 3.0.22-13.16-SUSE-SLES10 started.
Copyright The Samba Team 2000-2004
[2011/04/07 15:03:09, 0]
nsswitch/winbindd_util.c:winbindd_upgrade_idmap(1195)
idmap_convert: Unable to open idmap database
[2011/04/07 15:03:09, 1] nsswitch/winbindd.c:main(1012)
Could not init idmap -- netlogon proxy only
[2011/04/07 15:03:09, 0] nsswitch/winbindd_util.c:init_domain_list(522)
Could not fetch our SID - did we join?
[2011/04/07 15:03:09, 0] nsswitch/winbindd.c:main(1076)
unable to initalize domain list
[2011/04/07 15:03:33, 1] nsswitch/winbindd.c:main(979)
winbindd version 3.0.22-13.16-SUSE-SLES10 started.
Copyright The Samba Team 2000-2004
[2011/04/07 15:03:33, 0]
nsswitch/winbindd_util.c:winbindd_upgrade_idmap(1195)
idmap_convert: Unable to open idmap database
[2011/04/07 15:03:33, 1] nsswitch/winbindd.c:main(1012)
Could not init idmap -- netlogon proxy only
[2011/04/07 15:03:33, 0] nsswitch/winbindd_util.c:init_domain_list(522)
Could not fetch our SID - did we join?
[2011/04/07 15:03:33, 0] nsswitch/winbindd.c:main(1076)
unable to initalize domain list
Here is the change in smb.conf file, esatest being the AD test domain.
< workgroup = ESATEST
---
> workgroup = LANGROUP
27c27
< realm = esa.test
---
> realm = EFW.COM
Here is the krb5.conf changes made:
< default_realm = EFW.COM
---
> default_realm = esa.test
5a6,10 (below was inserted, leaving the old realms also in place)
> esa.test = {
> kdc = 10.1.32.58
> default_domain = esa.test
> admin_server = 10.1.32.58
> }
20a26
> .esatest = esa.test
______________________________________________________________________________________
The information contained in this email transmission may contain proprietary and
business
sensitive information. If you are not the intended recipient, you are hereby
notified that
any review, dissemination, distribution or duplication of this communication is
strictly
prohibited. Unauthorized interception of this e-mail is a violation of law. If
you are not
the intended recipient, please contact the sender by reply email and immediately
destroy all
copies of the original message.
Any technical data and/or information provided with or in this email may be
subject to U.S.
export controls law. Export, diversion or disclosure contrary to U.S. law is
prohibited.
Such technical data or information is not to be exported from the U.S. or given
to any foreign
person in the U.S. without prior written authorization of Elbit Systems of
America and the
appropriate U.S. Government agency.
