On 8/14/20 3:40 PM, Rowland penny via samba wrote:> Hmm, I use Louis's repo and mine is here: > > /lib/x86_64-linux-gnu/libnss_winbind.so.2 > > Try running 'pam-auth-update' as root, it will show the PAM profiles > in use, I have: > > [*] Kerberos authentication > [*] Unix authentication > [*] Winbind NT/Active Directory authentication > [*] Mount volumes for user > [*] Create home directory on login > [*] GNOME Keyring Daemon - Login keyring management > [*] Inheritable Capabilities Management > > Yours may be different, but the important ones are kerberos and winbind > > Which winbind backend are you using, the 'ad' or 'rid' ? If the 'ad', > have you added anything to AD ? > > Rowland > >Here is mine: ??? [*] Kerberos authentication ??? [*] Unix authentication ??? [*] Winbind NT/Active Directory authentication ??? [*] Register user sessions in the systemd control group ... ??? [*] Create home directory on login My backend is "ad". So, mine is here: "/usr/lib/x86_64-linux-gnu/libnss_winbind.so.2" and yours is here:? "/lib/x86_64-linux-gnu/libnss_winbind.so.2". Do I need to create a symbolic link between the two? Or are your saying that the distro does not incorporate symlinks like those needed on built from source installations? -- (Sent from home location.) Bob Wooden
On 15/08/2020 12:06, Bob Wooden via samba wrote:> [*] Kerberos authentication > ??? [*] Unix authentication > ??? [*] Winbind NT/Active Directory authentication > ??? [*] Register user sessions in the systemd control group ... > ??? [*] Create home directory on login > > My backend is "ad". > > So, mine is here: "/usr/lib/x86_64-linux-gnu/libnss_winbind.so.2" and > yours is here:? "/lib/x86_64-linux-gnu/libnss_winbind.so.2". Do I need > to create a symbolic link between the two? Or are your saying that the > distro does not incorporate symlinks like those needed on built from > source installations? >I use Louis's repo mainly on Debian and that is where the .so file is found, I also checked on a Ubuntu 18.04 domain member and it is in the same place, what OS are you using ? You shouldn't need to create any symlinks if you are using packages, they are only required if you compile Samba into /usr/local/samba or similar location. When the libnss-winbind, libpam-winbind and libpam-krb5 packages are installed, they place the .so files etc into the correct positions, these files are overwritten when the packages are updated. If you compile Samba yourself into /usr/local/samba and then, at a later date, compile a new version into the same location, the files are overwritten, but if you copied the .so files into the required locations, they wouldn't be replaced if you updated the Samba version, this is why symlinks are used. As you are using the 'ad' backend, I assume that your users have a uidNumber attribute and the Domain Users group has a gidNumber attribute. Rowland
On 8/15/20 6:55 AM, Rowland penny via samba wrote:> what OS are you using ?Debian 10> I assume that your users have a uidNumber attribute and the Domain > Users group has a gidNumber attribute.You are correct. I always prefer to double check that I have not confused myself on issues/differences with source built (the way I use to run Samba 4.11) and Louis/distro packages (my current setup.) Point is, I thought I was correct that the Louis/distro packages should know where to find "libnss_winbind.so.2". As I do not see Louis on the list on the weekends and I am going away for the weekend myself, I'll wait to see if Louis comments when we all get back online on Monday. Thanks for your help on this. I really appreciate it. Stay safe! -- (Sent from home location.) Bob Wooden
Hai,> I have an issue that "getent passwd SAMDOM\usrname" returns a blank response.And> Running "getent passwd" returns all the local users.Both results "are" correct. But have you tried this : getent passwd "SAMDOM\username" And does id username still work ;-) Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Bob > Wooden via samba > Verzonden: zaterdag 15 augustus 2020 14:34 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] getent passwd blank response > > On 8/15/20 6:55 AM, Rowland penny via samba wrote: > > what OS are you using ? > Debian 10 > > I assume that your users have a uidNumber attribute and the Domain > > Users group has a gidNumber attribute. > You are correct. > > I always prefer to double check that I have not confused myself on > issues/differences with source built (the way I use to run > Samba 4.11) > and Louis/distro packages (my current setup.) > > Point is, I thought I was correct that the Louis/distro > packages should > know where to find "libnss_winbind.so.2". > > As I do not see Louis on the list on the weekends and I am going away > for the weekend myself, I'll wait to see if Louis comments > when we all > get back online on Monday. > > Thanks for your help on this. I really appreciate it. > > Stay safe! > > -- > (Sent from home location.) > > Bob Wooden > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >