search for: domain_user_name

Good day! I have AD on Win2003 Server with Services For UNIX 3.5. When I try to set idmap backend = ad and type # id <domain_user_name> I get in log.winbindd-idmap following: [2007/11/07 18:09:18, 1] nsswitch/idmap_ad.c:idmap_ad_sids_to_unixids(613) Could not get unix ID AD user has SFU UID 20000000. wbinfo -u prints correct lists of domain users, and when using idmap bakend = tdb winbind assign UID for users. Best re...

Hi, I have a samba server sharing some stuff. Now i want to enable access to some share only to SOME users on the domain. this is the smb.conf : [global] netbios name = DATASVR server string = DATASVR socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384 idmap uid = 10000-20000 idmap gid = 10000-20000 winbind enum users = yes

Hi, I've got an annoying little problem with Samba and Win2k. I installed a Win2k Pro client on the network and set it to use plain text passwords and join the workgroup. The username and password of the user on the win2k box are the same as the account in /etc/passwd on the linux box. But after logging in, when trying to reconnect the mapped drives the windows box says: "Incorrect

...rror NT_STATUS_LOGON_FAILURE! [2011/09/08 12:54:41.893536, 1] smbd/sesssetup.c:332(reply_spnego_kerberos) Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE! ===========bash============================== All the diagnostic command wbinfo-u, wbinfo-g, wbinfo-t, getent passwd domain_user_name, net ads info - work out without any problems. Time synchronized by cron every hour command "net time set", so that option with the divergence time is irrelevant. The moment was lost access to the server - I have done "smbcontrol smbd debug 3". When you try to access the s...

...he various NTLM-related parameters and it always fail the same way: if the windows client falls back to NTLM, SSSD can't handle it. I don't even have wbinfo, as I've not installed winbind."getent passwd" and "getent group" return local users/groups only. "groups domain_user_name" returns the groups for that domain user name. SSH/SFTP logins always succeed. "net ads testjoin" asks for the machine account's password. Couldn't find a way to use the keytab or change the username for this command. "realm list" show that it's joined. If it w...

Single DC? If a single DC then there should not be any replication issues - that would only be between domain controllers and the event logs would indicate that.   I have 2 Windows DC's with a mix of Samba member servers. As far as I know, the domain member does not need client NTLM auth to be enabled to talk to the DC but I am not 100% sure.  You may want to try reenabling it and

...meters and it always fail the same way: if the > windows client falls back to NTLM, SSSD can't handle it. > > I don't even have wbinfo, as I've not installed winbind. > "getent passwd" and "getent group" return local users/groups only. > "groups domain_user_name" returns the groups for that domain user > name. SSH/SFTP logins always succeed. > > "net ads testjoin" asks for the machine account's password. Couldn't > find a way to use the keytab or change the username for this command. > "realm list" show th...