Chris Stankevitz
2015-Jan-26 20:27 UTC
[Samba] wbinfo -u and -t: works on one machine, fails on another
Hello, On machine 1, running Fedora 20, I can get "wbinfo -u" to provide a list of windows domain "MYCOMPANY.CORP" users by first launching winbindd and passing this three line conf file: [global] workgroup = MYCOMPANY security = ads Note that I am somewhat curious as to how wbinfo is able to obtain this user list even though nowhere do I supply a username or password of any user or administrator on the MYCOMPANY.CORP domain. I'm also curious why the conf file uses the term "workgroup" to refer to my windows domain. == Strangely on my Fedora 21 machine, the same process does not work. /var/log/samba/log.winbindd shows nothing of interest even up to -d 10. Even more strange is that "wbinfo -p" shows success on this machine even when neither winbindd nor smbd are running. == Can you suggest logs/documentation to look at (on linux or windows) to understand why wbinfo -u fails on one machine but succeeds on another? FYI I have turned off selinux and firewall for the machine that fails. Thank you, Chris
Rowland Penny
2015-Jan-26 20:45 UTC
[Samba] wbinfo -u and -t: works on one machine, fails on another
On 26/01/15 20:27, Chris Stankevitz wrote:> Hello, > > On machine 1, running Fedora 20, I can get "wbinfo -u" to provide a > list of windows domain "MYCOMPANY.CORP" users by first launching > winbindd and passing this three line conf file: > > [global] > workgroup = MYCOMPANY > security = ads > > Note that I am somewhat curious as to how wbinfo is able to obtain > this user list even though nowhere do I supply a username or password > of any user or administrator on the MYCOMPANY.CORP domain. I'm also > curious why the conf file uses the term "workgroup" to refer to my > windows domain. > > ==> > Strangely on my Fedora 21 machine, the same process does not work. > /var/log/samba/log.winbindd shows nothing of interest even up to -d > 10. Even more strange is that "wbinfo -p" shows success on this > machine even when neither winbindd nor smbd are running. > > ==> > Can you suggest logs/documentation to look at (on linux or windows) to > understand why wbinfo -u fails on one machine but succeeds on another? > FYI I have turned off selinux and firewall for the machine that > fails. > > Thank you, > > ChrisSeeing as how you are using Fedora, it is probably sssd. Rowland
Chris Stankevitz
2015-Jan-29 00:02 UTC
[Samba] wbinfo -u and -t: works on one machine, fails on another
On Mon, Jan 26, 2015 at 12:45 PM, Rowland Penny <rowlandpenny at googlemail.com> wrote:> Seeing as how you are using Fedora, it is probably sssd.Rowland, You were correct. strace led me to a package called sssd-libwbclient which was the source of the problem. I uninstalled sssd-libwbclient (one of many sss-themed packages) and it worked. Afterward I googled "samba sssd-libwbclient" and uncovered a bug report which apparently identifies and fixes the underlying problem: https://bugzilla.redhat.com/show_bug.cgi?id=1175511 Thank you for your help. Had I held more faith in it I would have solved my problem sooner. Chris
Maybe Matching Threads
- wbinfo -u and -t: works on one machine, fails on another
- Winbind have repeat "wbinfo -u" before user can authentication
- samba 3.0.2a domain member in Windows 2003 domain and MIT 1.3.2
- Replication failure between 2 Samba4 DCs
- wbinfo -u/-g/-n works, but not 'wbinfo -i' or 'id'