samba - Nov 2021 - Not able to join Debian 10 to AD using winbind

On Tue, 2021-11-02 at 13:39 +0530, Sac Isilia wrote:
> Hi Rowland,
> 
> Sorry for the late reply. Below are the requested details.
> 
> What OS are you using on the DC ? - Windows Server 2016
> What version of Samba ? - 4.9.5
> OS Samba packages or self-compiled ? - Samba packages
> What is the DC's short hostname ? - AZEUW1DCEM01
> What is the DC's ipaddress - 10.19.26.136
> 
> The same for your Unix domain member.
> 
> What is your dns domain ? - emea.media.global.loc
> What is your Netbios domain name (also known as the workgroup) ?
> - EMEA-MEDIA
> 
> A reminder on this issue - I was able to join the server to
> domain EMEA-MEDIA but i am unable to id the domain users 
> 
>  wbinfo -t
> checking the trust secret for domain EMEA-MEDIA via RPC calls
> succeeded
> 
> id EMEA-MEDIA\\kochal02
> id: ?EMEA-MEDIA\\kochal02?: no such user
> 
Please install ldb-tools (if not already installed), then run this
command:

sudo ldbsearch -H ldap://azeuw1dcem01.emea.media.global.loc -P -b
'dc=emea,dc=media,dc=global,dc=loc'
'(&(objectCategory=person)(objectClass=user)(sAMAccountName=kochal02))'

That should produce the AD object for 'kochal02'

Rowland

Hi Rowland,

The command given by you produced a long output of which few lines are
below.

 ldbsearch -H ldap://azeuw1dcem01.emea.media.global.loc -P -b
'dc=emea,dc=media,dc=global,dc=loc'
'(&(objectCategory=person)(objectClass=user)(sAMAccountName=kochal02))'
WARNING: [printers] service MUST be printable!
# record 1
dn: CN=Konrad Ochal (62056228),OU=Managed Users,OU=Standard Users,OU=User
Accounts,DC=emea,DC=media,DC=global,DC=loc
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: Konrad Ochal (62056228)
sn: Ochal

But when I run the id command again , it still shows no such user. How to
fix that ?

Regards
Sachin Kumar

On Tue, Nov 2, 2021 at 2:05 PM Rowland Penny via samba <
samba at lists.samba.org> wrote:
> On Tue, 2021-11-02 at 13:39 +0530, Sac Isilia wrote:
> > Hi Rowland,
> >
> > Sorry for the late reply. Below are the requested details.
> >
> > What OS are you using on the DC ? - Windows Server 2016
> > What version of Samba ? - 4.9.5
> > OS Samba packages or self-compiled ? - Samba packages
> > What is the DC's short hostname ? - AZEUW1DCEM01
> > What is the DC's ipaddress - 10.19.26.136
> >
> > The same for your Unix domain member.
> >
> > What is your dns domain ? - emea.media.global.loc
> > What is your Netbios domain name (also known as the workgroup) ?
> > - EMEA-MEDIA
> >
> > A reminder on this issue - I was able to join the server to
> > domain EMEA-MEDIA but i am unable to id the domain users
> >
> >  wbinfo -t
> > checking the trust secret for domain EMEA-MEDIA via RPC calls
> > succeeded
> >
> > id EMEA-MEDIA\\kochal02
> > id: ?EMEA-MEDIA\\kochal02?: no such user
> >
>
> Please install ldb-tools (if not already installed), then run this
> command:
>
> sudo ldbsearch -H ldap://azeuw1dcem01.emea.media.global.loc -P -b
> 'dc=emea,dc=media,dc=global,dc=loc'
>
'(&(objectCategory=person)(objectClass=user)(sAMAccountName=kochal02))'
>
> That should produce the AD object for 'kochal02'
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>