Thank you for your help on this, Rowland. A tweak of PAM and a restart of nscd and suddenly all my file permissions were back. You've saved my weekend :-) Tim
On Sat, 27 May 2017 14:17:28 +0000 Tim ODriscoll via samba <samba at lists.samba.org> wrote:> Thank you for your help on this, Rowland. > > A tweak of PAM and a restart of nscd and suddenly all my file > permissions were back. > > You've saved my weekend :-) > > TimApart from the fact that you shouldn't use nscd with winbind , it has its own cache. Rowland
On 27 May 2017 15:44> Apart from the fact that you shouldn't use nscd with winbind , it has > its own cache.Point taken - it's disabled now.. After thinking everything was fine, I'm now getting RPC failures on my Windows clients. I can map a drive with 'net use..', but 'net user tim.odriscoll /domain' returns a 1722 error, 'The RPC server is unavailable'. I can see port 135 open on the DC's and the firewall's are off. I believe this was working before I messed about with PAM.. Any pointers as to where to look? Google is just throwing up Microsoft sites.. Many thanks, Tim
On 27 May 2017 16:07> After thinking everything was fine, I'm now getting RPC failures on my Windows clients. > I can map a drive with 'net use..', but 'net user tim.odriscoll /domain' returns a 1722 error, 'The RPC server > is unavailable'.Turns out 'authconfig' (used to modify PAM files), also adds a few extra bits to smb.conf. It adds 'security = ads', which breaks my RPC calls for user info. With 'security = ads' commented out, everything *appears* to be back to normal.... Thank you, Tim