similar to: Samba 3, winbind, win2k AD: Kerberos question

Greetings. I am running Samba 3.0.23d on Gentoo and am in the process of joining it to the AD domain as I have done with numerous other servers. The last item that I am working on that is bugging the crud out of me is that I have "winbind use default domain = yes", but when using wbinfo -[u|g] or getent [passwd|group] I still see the domain portion of the user/group account listed.

Hi, I am doing some kerberos testing with samba4 using ssh. I have setup samba4 using the howto at http://wiki.samba.org/index.php/Samba4/HOWTO and active directory seems to be working both with Windows and Linux clients. ssh unfortunately is not kerberos authenticating via GSSAPI. The client krb5.conf contains this: ===================================================== [libdefaults]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Specs: Samba 2.2.3a Linux stark 2.4.20-20.9.XFS1.3.1 #1 Sat Oct 11 15:23:43 CDT 2003 i686 athlon i386 GNU/Linux Win2k Server, latest service packs installed. I do nightly system state backups on my domain controller, and I would like to have those files backed up to my linux box using a cron job. However, when viewed from the linux box, the file

I also have made this configuration working with w2k, the problem is related do enc-types used by w2k3. I have seen a lot of people complaining about the same issue. Can the samba gurus help the community ??? What are the right configuration to put a Samba 3.0.x working as a Active Directory 2003 member and be accessible through \\<samba name>\<share name> ?! Please Jerry Carter,

I have a RHEL 4.6 server with the Red Hat supplied Samba 3.0.25b-1.el4_6.4 packages (samba, samba-client, samba-common) installed. I was able to bind this server to our Active Directory forest but when I run "groups username" all I get is "username : domain users" despite the fact our users are members of multiple groups in our AD domain. However I can chgrp files/directories

Dear List, I seem to have a problem with winbind. Have successfully joined samba to a 2003 AD, but when I start winbind, the logs are full of the following: ==> log.winbindd <== [2008/01/14 11:25:58, 1] libads/cldap.c:recv_cldap_netlogon(247) Failed to parse cldap reply Running wbinfo -t returns: checking the trust secret via RPC calls failed error code was (0x0) Could not check

Greetings. I have just started scratching the surface of using Samba to create a SSO environment for my network. I have been playing a bit with both SuSE 9.3 and CentOS 4.1 to authenticate to an AD PDM (W2K). I've made it the farthest with the CentOS server. I have joined it to the domain and been able to verify AD users and groups using wbinfo [-u|-g] and getent [passwd|group]. I have

Dear list, I have a question about ADS server fallback of a Samba domain member in a W2k3 environment. I describe now a little our real production ADS environment; Madrid: two W2k3 ADS servers (ADM01 and ADM02) in a cluster; both are a global catalog servers in the XXXX.COM realm. Berlin; one W2k3 ADS server (ADM03); is also a global catalog server in the XXXX.COM realm. The ADS servers in

Hi everyone, I've done a lot of reading on this issue over the last couple of days I had a "Red Hat Linux release 9 (Shrike)" box running 3.0.3a and the stock redhat krb5 package and it was authenticating against a w2k AD domain (over which I have very little control save for my little OU). things were working ok, but I wanted to update it to the new bug fixed versions.

Hello, I'm using samba 3.0.4, compiled with Kerberos 1.3.1-7, in an W2k3 ADS environment and Kerberos and the Winbind daemon are used for authentication. While checking a winbindd.log file I saw the following PANIC internal error: winbindd.log ========= [2004/07/21 12:15:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(1032) user 'root' does not exist [2004/07/21 12:15:00, 1]

Hi all, I've just been following a series of guides to set up "winbind" authentication on a container build I'm working on, but I'm seeing some strange behaviour.... After the "net ads join -k", some users can log in, but others cannot (pam says their account does not exist)... although they can all authenticate with kinit! If someone has an idea why this might

HI, I am trying to setup winbind on Samba 3.0.2 running on Red Hat AS 3.0. I have completed most of the steps of setting up winbind successfully but when it came for me to login in using the AD account username and password, it didn't allow me to login. the error message i am getting is incorrect password or check username. During the setup i tested the wbinfo -u command and i was

Skipped content of type multipart/mixed-------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 254 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/20031111/3854e797/attachment.bin

Config: Solaris 8, OpenLDAP winbind backend, using AD for global users. Is there documentation on what service_name / module_type pairs are supported by pam_winbind? I've gone through the Samba-3 HOWTO book and internet searches, but haven't found anything difinitive. I have been able to tell through experimentation that winbind doesn't work with "rsh auth", giving a

Hello. I know that it is recommended to run smbd as a standalone daemon and to avoid inetd. Can you please tell me why inetd is discouraged and what problems it imposes? Also, I have one user who is having problems accessing her personal files on a MacOSX 10.3.2 via smb. Any ideas what may be causing it? Judy Lin NACS-DCS

Hello all, First of all, I'm really a newbie in Samba. I can manage to setup the Samba server in security = user, and now I'm trying to do a more complicated thing. I wish the Samba server to be our domain master in group COMOPT, that is workgroup = COMPOPT. I do not want to have Linux user accounts for the users, but rather to validate them using another domain server, whose domain

Hello, I have a samba server which has a directory with 11764 files. (The program stores information about jobs and each job has 3 files, nothing I can do about it). When I do a listing of that directory using smbclient, it takes 15+ seconds to complete, same thing on Windows XP. Does anyone have any ideas on how I can speed this up? I did a log on log level 10, it is accessible at

Hi all, Sorry if this has been asked, but I haven't had any luck with my searches, so I would assume it hasn't. I have joined my samba box to my AD domain ( win2k server ). I can do individual user lookups with wbinfo -a user%pass successfully. But I can't retrieve a domain user list with `wbinfo -u`. `wbinfo -g` works, sorta, but it only returns the BUILTIN accounts ( System

Two * servers: *a and *b. Outside call comes in *b, and is automatically routed to *a. Someone on a sip phone connected to *a then decides to transfer the call to someone on a sip phone connected to *b. The transfer works. At this point, is *a still in the converstation? Or is * smart enough to see where the data stream is going/coming from? Thanks for any help in advanced, and sorry if

Hi all, I'm researching IP phones for a new office setup. We will need 30 phones. I have read the wiki and the polycom site for the phones, but I still had some questions about real world experience with these phones. -According to the documentation, the 500 series ( and 600, according to a polycom rep ) have built in hubs. Has anybody noticed performance issues in this setup, when