samba - Nov 2022 - Login From Domain

On 13/11/2022 20:11, Rob Campbell wrote:
> 
> $ nmblookup -A 10.0.0.10
> Looking up status of 10.0.0.10
> DC01 ? ? ? ? ? ?<00> - ? ? ? ? M <ACTIVE>
> DC01 ? ? ? ? ? ?<03> - ? ? ? ? M <ACTIVE>
> DC01 ? ? ? ? ? ?<20> - ? ? ? ? M <ACTIVE>
> HOME ? ? ? ? ? ?<1b> - ? ? ? ? M <ACTIVE>
> HOME ? ? ? ? ? ?<1c> - <GROUP> M <ACTIVE>
> HOME ? ? ? ? ? ?<00> - <GROUP> M <ACTIVE>
> __SAMBA__ ? ? ? <00> - <GROUP> M <ACTIVE>
<PERMANENT>
> __SAMBA__ ? ? ? <20> - <GROUP> M <ACTIVE>
<PERMANENT>
This is AD, so I suggest you stop using NT4-style domain tools
> 
> # /etc/nsswitch.conf
> #
> # Example configuration of GNU Name Service Switch functionality.
> # If you have the `glibc-doc-reference' and `info' packages
installed, try:
> # `info libc "Name Service Switch"' for information about
this file.
> 
> passwd: ? ? ? ? files systemd winbind
> group: ? ? ? ? ?files systemd winbind
> shadow: ? ? ? ? files
> gshadow: ? ? ? ?files
> 
> #hosts: ? ? ? ? ?files mdns4_minimal [NOTFOUND=return] dns myhostname 
> mymachines
> hosts: ? ? ? ? ?files dns wins
No, you shouldn't be using 'wins', you should only be using dns
> networks: ? ? ? files
> 
> protocols: ? ? ?db files
> services: ? ? ? db files
> ethers: ? ? ? ? db files
> rpc: ? ? ? ? ? ?db files
> 
> netgroup: ? ? ? nis
> 
> 
> Don't I need to do something with a pam.d file?
Such as ?
If this is Debian, then this is done for you.

Rowland

14.11.2022 00:18, Rowland Penny via samba ?????:
..
>> Don't I need to do something with a pam.d file?
> 
> Such as ?
> If this is Debian, then this is done for you.
It is done if you install libpam-winbind package, and if
you actually configured it.  The configuration utility is
invoked after libpam-winbind installation automatically.

The PAM bits should be enabled in this case.

/mjt