similar to: Problem Configuring 3.0.1 on Solaris

Hi All, I'm having a strange pronlem with winbind. For users it seems to be working fine but for groups its not enumerating most of the groups! A getent group produces only 325 lines of domain groups whereas wbinfo -g produces 2839 lines of groups. I'm not seeing any errors logged and all commands are exiting with status 0. Winbind related sections of smb.conf are shown below,

I've seen this posting before but I need to get a grasp on this. I am using winbindd for users that don't have a local account on a Linux box. I thought that placing the entries below in the smb.conf would create users in ou=Idmap. Instead the ou=Idmap increments the uidNumber with every user that is added,but the user ID mappings are stored in /usr/local/var/locks/winbindd_idmap.tdb. What

I've gone back to 3.0.1 to try and get winbind to work with my Solaris 9 machine and NT4 domain. Everything works except user authentication. The wbinfo and getent commands do what they are supposed to. I've included a truss of 'su - ganguly' According to pamlog, the user 'ganguly' has been granted access but it is still hanging. How do I do a truss of a telnet login?

Hi, I'm having an issue with samba 3.0.1 (and I also tried grabbing source from cvs a day ago). I've searched around, but haven't come up with any working patches to help me. My first issue is an interaction between the principals used by samba and those by openssh. I built openssh with gssapi support. For sshd, I need to install a host/machine principal in the keytab

Hi list, I'm trying to compile samba 3.0.1 rc1 with --enable-dmalloc switch because I have been asked to provide more information on a winbindd panic on a Solaris server. However the configure fails with the error shown below, config.status: creating include/config.h Note: The dmalloc debug library will be included. To turn it on use ./configure: command substitution: line 3: syntax error:

Everytime I add or remove some samba shares, I must restart smb service to take effect. Is there anyway to reconfig it without restart?

Hi All, can anyone make any sense of the error below, please advise if I need to log this as a bug but I'm not sure how to further diagnose what is happening. This is from my winbindd log file, thanks Andy. [2003/11/07 17:47:59, 1] nsswitch/winbindd.c:main(832) winbindd version 3.0.0 started. Copyright The Samba Team 2000-2003 [2003/11/07 17:48:00, 1]

Just a quick question, it may sound a bit stupid but I just want to make sure. I have a Solaris 9 machine running winbind, the backend is an OpenLDAP database running on a RedHat 9 machine. My question is, apart from the 'smbpasswd -w' command and the obvious stuff in smb.conf, do I have to set up the LDAP client on Solaris for Samba to be able to put new mappings into the LDAP database?

When I use mount_smbfs I receive such message: # mount_smbfs -W sbrc -U Kid -E koi8-r:cp1251 -Iradius.sbrc.local //Kid@radius/MUSIC$ /home/anonftp/.2 mount_smbfs: can't get server address `radius.sbrc.local': Resolver Error 0 (no error) mount_smbfs: can't get server address: syserr = Network is down Network is up in fact, dns server resolves name, but I receive this message

Hi list, If I have multiple Samba member servers in a domain can I store the groupmap data in LDAP? When I try this I get this error # net groupmap add ntgroup=Everyone unixgroup=nobody No rid or sid specified, choosing algorithmic mapping adding entry for group nobody failed! But this works correctly (creates account in LDAP server) smbpasswd -a username password the LDAP config in my

Dear All, I am trying to get SSL working with Samba 3.0. My set up is Samba 3.0 as a USER server in its own Workgroup (will eventually be part of a domain). My platform is Solaris 9 and the ldap service I am using is iPlanet directory server 5.2. I can get users to log in to the server using their ldap account and password but not over SSL. The iPlanet directory has a certificate on it (self

Hi, I'm a bit confused over the whole "dn" concept .... various documentation states that I should create new samba-entries with dn: uid=user,ou=<user-org>,dc=<domain> and other states that i should do it with dn: cn=user,ou=<user-org>,dc=<domain> Right now i have a few entries, created both ways... and since i'm not quite home in ldap, I haven't

Hi... I have just installed Linux Slackare 9.1 with Gcc 3.2.... Then I decieded to try out Samba 3 insted of 2 wich I have been using for a while now... I did this when compiling... ./configure --prefix=/usr make Then when I checked the source/bin dir there was about 400mb of files there... It was the correct bin files but they were so huge that ther has to be something wrong.. Smbd was about

We are in the process of updating samba on our Solaris servers from (2.0.5) to (3.0.2) I have completed one host and all seems to working ok. However I have noticed that for both versions of samba, as users map shares the smbd process which starts can be either own by root or the users id. This seems to be random. Can anyone shed light as to what controls the owner of this process. This is

Hi all, anyone able to point out why I'm not able to get samba 3.0.0 to update my LDAP server with any idmap data? I'm using SunOne DS 5.2 LDAP server and the following entries in my smb.conf file, ldap admin dn = "uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot" ldap ssl = off ; ldap suffix = "dc=testlan,dc=bbc,dc=co,dc=uk" ** have tried with this

hi , Compiled and installed samba 3.0.2a as PDC in sun solaris 2.9, for supporting win xp machines. Working on the Kerberos support, would like to whether the Sun solaris version of kerberos is compatible with samba 3.0.2a. Thanx in advance aarumuga __________________________________ Do you Yahoo!? Get better spam protection with Yahoo! Mail. http://antispam.yahoo.com/tools

Hi All, can someone elaborate on the cause of my problem mentioned below? Service records exist for DC's only on DNS servers in that domain (ie DNS server in domain X has service records only for all DC's in domain X and so on for each domain), should normal DNS forwarding not allow a client in one domain to read the service record data from another? Normal host records for all domains

I can't say I've tested this in any depth. Where multiple LDAP servers are listed as the LDAP backend is the behaviour of Samba that if it fails to contact the first listed server it will try the second and so on? If that's the case Samba should only ever try and update the password on a single LDAP server which would then replicate the change to any other master and slave LDAP servers

Hi everyone, I'm using the production release of 3.0.0 and can not join a W2003 domain: [printsrv4] /spool/samba-3.0.0/bin $ ./net -d 10 ads join -Uhumpty_dumpty [2003/10/29 15:35:39, 3] libads/sasl.c:ads_sasl_spnego_bind(191) got principal=adc1$@WIN.DESY.DE [2003/10/29 15:35:39, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269) krb5_cc_get_principal failed (No credentials cache found)

Is there any way to "automate" kerberos authentication on Mac OS X? Here's the problem: When a user wants to access samba-3.0.2a -server from a Mac, he/she has to run "kinit" to get the principal ticket. If this is not done, Mac's tools (Finder) will try to authenticate with NTLM, which is and will be disabled on our servers. Of course, this fails miserably. I