search for: jcntv

...29 Nov 2002 17:13:39 -0800 Hello, In my further investigation, it seems that winbindd cannot locate my kerberos ticket. Or, at least this is what this log output from winbindd >[2002/11/29 07:04:17, 1] nsswitch/winbindd_util.c:init_domain_list(220) > Retrying startup domain sid fetch for JCNTV >[2002/11/29 07:04:17, 1] libsmb/clikrb5.c:krb5_mk_req2(56) > krb5_cc_get_principal failed (No credentials cache found) >[2002/11/29 07:04:17, 1] nsswitch/winbindd_ads.c:ads_cached_connection(72) > ads_connect for domain JCNTV failed: NT_STATUS_LOGON_FAILURE Am I correct? But I do ha...

...ng is that "net ads status" shows that my system is a member of the domain, but in starting winbindd, winbindd reports this: winbindd version 3.0alpha21 started. Copyright The Samba Team 2000-2001 [2002/11/29 07:04:07, 1] nsswitch/winbindd_util.c:add_trusted_domain(140) Added domain JCNTV [2002/11/29 07:04:07, 1] libsmb/clikrb5.c:krb5_mk_req2(56) krb5_cc_get_principal failed (No credentials cache found) [2002/11/29 07:04:07, 1] nsswitch/winbindd_ads.c:ads_cached_connection(72) ads_connect for domain JCNTV failed: NT_STATUS_LOGON_FAILURE [2002/11/29 07:04:17, 1] nsswitch/winbindd...

...'m really satisfied and grateful as it really helps out in our infrastructure. I do however experience an issue that is really stumping me. The problem exists in the mapping of winbind GID/UIDs to names. From time to time, the GID will just change. For example, in our environment, the Group JCNTV/Domain Admins is mapped to GID 60005. Well today, I just realized that the GID # changed to a number other than 60005, which totally screwed up my permissions, acls and etc. Since it seems that winbindd controls these numbers, is there a way to create a static mapping? Or at least turn off thi...