search for: libpam_winbind

...ot to mention, the computer connects and has a home directory created as well because of the pam_mkhomedir.so above. server samba(pam_quota)[19348]: Successfully setup quotas for UID 387093 server samba(pam_unix)[19348]: session opened for user MAIN\computer$ by (uid=0) server pam_winbind[19348]: libpam_winbind:pam_sm_open_session handler server samba(pam_unix)[19350]: session opened for user MAIN\user2 by (uid=0) server pam_winbind[19350]: libpam_winbind:pam_sm_open_session handler server samba(pam_unix)[19348]: session closed for user MAIN\computer$ server pam_winbind[19348]: libpam_winbind:pam_sm_close...

...ve set my smb.conf shell line to template shell = /sbin/sh and also tried template shell = /usr/bin/sh both files exist. # # PAM configuration # # Authentication management # login auth sufficient /usr/lib/security/libpam_unix.1 debug login auth sufficient /usr/lib/security/libpam_winbind.1 debug #login auth sufficient /usr/lib/security/libpam_smb.1 nolocal debug su auth required /usr/lib/security/libpam_unix.1 debug dtlogin auth required /usr/lib/security/libpam_unix.1 debug dtaction auth required /usr/lib/security/libpam_unix.1 debug ftp auth required /usr...

Skipped content of type multipart/alternative

...orestDnsZones and DomainDnsZones ? Please find attached the export of my DNS configuration. Thank you, Alexis. On 07/06/2016 16:05, Rowland penny wrote: > On 07/06/16 14:44, Alexis RIES wrote: >> I put the usermapping but this does not solve the problem. >> >> I do not use libpam_winbind and libpam-krb5 because I did not need to >> log in server using domain accounts, it seems to me that this is not >> mandatory, you confirm ? > > This could well be your problem, try installing them. My domain member > works and this seems to be the only difference between m...

I put the usermapping but this does not solve the problem. I do not use libpam_winbind and libpam-krb5 because I did not need to log in server using domain accounts, it seems to me that this is not mandatory, you confirm ? Here are the permissions of the file /etc/krb5.keytab: root at smb1:/home/adminlocal# ls -l /etc/krb5.keytab -rw------- 1 root root 2312 Jun 7 14:44 /etc/krb5....

I currently have a setup of 1 NT 4.0 PDC server and to SUSE boxes sharing via a samba share. I seem to have to make 5 different usename/password databases. 1 for NT, 2 for each SuSe box (One Linux and one Samba). Is there a way to have 1 or maybe two databases to update? I've read about LDAP on other connections but I'm a little confused as to what is the best approach. Oh

...nd interface details: WBC_ERR_WINBIND_NOT_AVAILABLE could not obtain winbind domain name! checking the NETLOGON for domain[] dc connection to "" failed failed to call wbcPingDc: WBC_ERR_WINBIND_NOT_AVAILABLE How do I make winbind available (that means available for PAM,a s well)? Note: libpam_winbind is installed. Current smb.conf: [global] bind interfaces only = Yes interfaces = lo ens3 netbios name = DC realm = EXAMPLE.COM server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl,...

...>>>> >>>> >>>> On 07/06/2016 16:05, Rowland penny wrote: >>>>> On 07/06/16 14:44, Alexis RIES wrote: >>>>>> I put the usermapping but this does not solve the problem. >>>>>> >>>>>> I do not use libpam_winbind and libpam-krb5 because I did not >>>>>> need to log in server using domain accounts, it seems to me that >>>>>> this is not mandatory, you confirm ? >>>>> >>>>> This could well be your problem, try installing them. My domain >...

...l part of Active Directory, so if the machine you are trying to join as a DC cannot find the KDC via dns, then it is likely to have problems later. You must have working dns before the join. I have read your join howto and have the following comments, based on my experience. I would also install libpam_winbind and libpam_krb5 /etc/krb5.conf needs to be only this: [libdefaults] default_realm = MONDOMAINE.LAN dns_lookup_realm = false dns_lookup_kdc = true I would stop smbd, nmbd, winbind before the join I would run the join command like this: samba-tool domain join mondomaine.lan DC -U adm...

...> Configure nss_switch.conf and run pam-auth-update > > And set these to to no, when your done testing. > > winbind enum users = yes > > winbind enum groups = yes > See your users: id username or getent passwd username. > > > > > Note: libpam_winbind is installed. > > > > Current smb.conf: > > > > [global] > > bind interfaces only = Yes > > interfaces = lo ens3 > > netbios name = DC > > realm = EXAMPLE.COM > > server role = active directory doma...

...; > >> And set these to to no, when your done testing. > >> > winbind enum users = yes > >> > winbind enum groups = yes > >> See your users: id username or getent passwd username. > >> > >> > > >> > Note: libpam_winbind is installed. > >> > > >> > Current smb.conf: > >> > > >> > [global] > >> > bind interfaces only = Yes > >> > interfaces = lo ens3 > >> > netbios name = DC > >> > real...

...attached the export of my DNS configuration. > > Thank you, > Alexis. > > > > On 07/06/2016 16:05, Rowland penny wrote: >> On 07/06/16 14:44, Alexis RIES wrote: >>> I put the usermapping but this does not solve the problem. >>> >>> I do not use libpam_winbind and libpam-krb5 because I did not need >>> to log in server using domain accounts, it seems to me that this is >>> not mandatory, you confirm ? >> >> This could well be your problem, try installing them. My domain >> member works and this seems to be the only...

...attached the export of my DNS configuration. > > Thank you, > Alexis. > > > > On 07/06/2016 16:05, Rowland penny wrote: >> On 07/06/16 14:44, Alexis RIES wrote: >>> I put the usermapping but this does not solve the problem. >>> >>> I do not use libpam_winbind and libpam-krb5 because I did not need >>> to log in server using domain accounts, it seems to me that this is >>> not mandatory, you confirm ? >> >> This could well be your problem, try installing them. My domain >> member works and this seems to be the only...

.... >> >> Thank you, >> Alexis. >> >> >> >> On 07/06/2016 16:05, Rowland penny wrote: >>> On 07/06/16 14:44, Alexis RIES wrote: >>>> I put the usermapping but this does not solve the problem. >>>> >>>> I do not use libpam_winbind and libpam-krb5 because I did not need >>>> to log in server using domain accounts, it seems to me that this is >>>> not mandatory, you confirm ? >>> >>> This could well be your problem, try installing them. My domain >>> member works and this s...

.... >> >> Thank you, >> Alexis. >> >> >> >> On 07/06/2016 16:05, Rowland penny wrote: >>> On 07/06/16 14:44, Alexis RIES wrote: >>>> I put the usermapping but this does not solve the problem. >>>> >>>> I do not use libpam_winbind and libpam-krb5 because I did not need >>>> to log in server using domain accounts, it seems to me that this is >>>> not mandatory, you confirm ? >>> >>> This could well be your problem, try installing them. My domain >>> member works and this s...

...ort install : libnss-winbind libpam-winbind Configure nss_switch.conf and run pam-auth-update And set these to to no, when your done testing. > winbind enum users = yes > winbind enum groups = yes See your users: id username or getent passwd username. > > Note: libpam_winbind is installed. > > Current smb.conf: > > [global] > bind interfaces only = Yes > interfaces = lo ens3 > netbios name = DC > realm = EXAMPLE.COM > server role = active directory domain controller > server services =...

...onf and run pam-auth-update >> >> And set these to to no, when your done testing. >> > winbind enum users = yes >> > winbind enum groups = yes >> See your users: id username or getent passwd username. >> >> > >> > Note: libpam_winbind is installed. >> > >> > Current smb.conf: >> > >> > [global] >> > bind interfaces only = Yes >> > interfaces = lo ens3 >> > netbios name = DC >> > realm = EXAMPLE.COM >> > s...

...I advocate to make an explicit configuration of KDC in /etc/krb5.conf. And actually it is a must have in a large multi-site setup with slow VPN and strict firewall rules. > I have read your join howto and have the following comments, based on > my experience. > > I would also install libpam_winbind and libpam_krb5 we are limiting at much as possible shell connection to the AD (a compromission on your AD is a compromission of your whole network). So we don't enable this kind of authentication on DC. SSH key exchange for the lucky few that manage the AD is much better suited IMHO. >...

Using RH7.1, Samba 2.2.2 in a Win2k mixed-mode domain. wbinfo returns expected results but getent only returns linux users any ideas? Thankx Winston Nimchan _/_/_/_/_/ _/_/_/_/ _/ Software Development Mgr. _/ _/ _/ Trinidad Systems Limited _/ _/_/_/_/ _/ 1.868.628.9330 Ext. 215 _/ _/ _/ 1.868.767.0249 _/ _/_/_/_/

Yes, the /etc/krb5.keytab file is created when the domain-join. I just noticed that it's not only after a reboot I have this problem. I lost the domain-join on my first SMB server, it has not been restarted. Note that I use Cluster Mode (CTDB), but the problem is the same when I remove the cluster configuration. Attached is the requested files. Thank you, Alexis. On 07/06/2016 09:43,