search for: wbcgetgroups

I'm trying to configure Squid ntlm autentication on Samba4 DC. I followed Squid and Samba's documentation and i got success when I login with user natalia.silva, but if I log with natalia.vaz i get the error -- Nat?lia Vaz Silva Administradora de redes

...and it seems that winbind wont handle it. I get this on my cache log with /usr/lib/squid/ext_wbinfo_group_acl (wbinfo_group.pl) script. Got max Internet-Access from squid User: -max- Group: -Internet-Accesss- SID: -S-1-5-21-3122064890-3824127986-1965815265-2719- GID: -10004- failed to call wbcGetGroups: WBC_ERR_DOMAIN_NOT_FOUND Could not get groups for user max Sending ERR to squid Problem is, that username is not max, it is "max mustermann". You can see, that the user sid is well resolved (how ever it is possible). Users with no white spaces works fine in squid. Same problem with w...

...gt; I get this on my cache log with /usr/lib/squid/ext_wbinfo_group_acl > (wbinfo_group.pl) script. > > Got max Internet-Access from squid > User: -max- > Group: -Internet-Accesss- > SID: -S-1-5-21-3122064890-3824127986-1965815265-2719- > GID: -10004- > failed to call wbcGetGroups: WBC_ERR_DOMAIN_NOT_FOUND > Could not get groups for user max > Sending ERR to squid > > Problem is, that username is not max, it is "max mustermann". Are you mixing up the users 'cn' and 'samaccountname' ? The users 'cn' could be 'max mustermann...

Hi list, I just upgraded an AD DC from 4.1.17 to 4.2.10 (using jessie package), wbinfo -r someuser now fails randomly (well not THAT randomly I guess it depends on group membership) $ wbinfo -r oneuser failed to call wbcGetGroups: WBC_ERR_DOMAIN_NOT_FOUND Could not get groups for user oneuser $ wbinfo -r anotheruser [list of GIDs] wbinfo -u & wbinfo -g returns no error wbinfo -i oneuser & wbinfo -i anotheruser work fine I suspect that there is a relation with the switch to regular winbind to do resolution, maybe...

...ays groups wbinfo -D FOO wbinfo -n FOO\\vincent shows me the SID but wbinfo --user-sids=<SID> returns failed to call wbcLookupUserSids: WBC_ERR_DOMAIN_NOT_FOUND Could not get group SIDs for user SID S-1-5-21-2816186202-4468957523-2022743653-4403 wbinfo -r FOO\\vincent returns failed to call wbcGetGroups: WBC_ERR_DOMAIN_NOT_FOUND Could not get groups for user FOO\vincent I got these logs in winbindd.log : [2019/04/26 10:11:27.061645,  1, pid=3586, effective(0, 0), real(0, 0)] ../librpc/ndr/ndr.c:468(ndr_print_function_debug)        wbint_LookupName: struct wbint_LookupName           in: struct wb...

Thank you for your feedback. I have changed the parameters, but still no success. winbind use default domain = yes idmap config * : range = 1000000-1999999 idmap config MYDOM : range = 100-999999 Regards, Martin 2017-08-18 15:00 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > > See inline comments: > > On Fri, 18 Aug 2017 14:40:54 +0200 >

...sucessfully: wbinfo --sid-to-uid "S-1-5-21-1585417398-3384821309-2524188735-13667" 13667 root at solaris1:/# wbinfo --uid-info=13667 mdecker:*:13667:7142::/home/MYDOM/mdecker:/bin/false ... but "wbinfo -r" does not work: root at solaris1:/# wbinfo -r mdecker failed to call wbcGetGroups: WBC_ERR_DOMAIN_NOT_FOUND Could not get groups for user mdecker Testing access to a Solaris SMB Share from Windows, reports this error when trying to mount the share: [2017/08/21 17:19:44.281527, 3] auth/user_krb5.c:50(get_user_from_kerberos_info) Kerberos ticket principal name is [mdecker at...

Hi! Indeed!, this sounds like good advice... there are certainly bugs, I had to get the 7.04.5 package from "proposed" to get resolve a PAM library issue!... although I suppose that's a packaging problem. What is the best way to get an updated Samba package here, I'm trying to make this system reproduceable, I have a single script that builds the entire container, and sets up