similar to: RE: winbind/wbinfo not pulling info from W2K AD PDC

Hi list, I have samba-3.0.2-2 rpm installed on Redhat Enterprise Linux 3 AS kernel version. I've been using the Samba 3 How-To and messages on various mailing lists to join Samba to an AD domain and authenticate using winbind/pam. So far Samba has successfully become a member of the AD domain and can browse file servers using smbclient but I haven't been able to get winbind working -

Dear List! I have the problem described at http://lists.samba.org/archive/samba/2008-February/138451.html It is materialized after an upgrade of samba/winbind. Everything was working before. I could not find the solution neither on the net, nor from people originally having the problem, so here I am. This problem is a showstopper for me. (I can login by changing pam_winbind to pam_krb5, but this

Hi! The problem lies in the "winbind separator" settings. If I use winbind separator = \\ everything goes well. I believe this is due to a bug. As I don't want to register to yet another bugzilla, please someone issue the report there. Explanation: winbindd_raw_kerberos_login uses parse_domain_user to generate the kerberos principal from state->request.data.auth.user at this

All, I have a Samba 3.0.4 server running on AIX 5.2. Samba is configured with PAM, LDAP and Kerberos. The server has been joined to an existing Windows 2003 domain, and wbinfo -u and wbinfo -g works fine. Users from the domain that Samba is a member of can authenticate just fine. The domain is in a one-way trust relationship with another ADS domain (i.e. Samba is a member of domain A,

I'm setting up Samba in an environment with 2 Active Directory domains setup with a one way trust (DOMAINA -> DOMAINB). Samba is in DOMAINA. From looking at the logs (see below) it appears that winbind is having troubles getting the credentials for the domain controller in DOMAINB. I can get tickets, using kinit, for accounts in both domains. I can join DOMAINA just fine. Running

Hi all, I've been working on getting Samba to authenticate via ADS for the past few weeks with some lack of success. I had somewhat of a breakthrough the other day realizing that the problem was related to the kerberos authentication between Samba and the Win 2008 R2 AD server. Trying to fix this I generated a keytab with ktpass which I uploaded to the server. I've been successful to

I'm using RH9, and I have compiled samba 3.0.1 compiled from sources, > with the following options: > ./configure --with-winbind --with-winbind-auth-challenge --with-pam \ > --with-acl-support --with-ldapsam --with-pam_smbpass \ --with-ads > --with-ldap --with-dce-dfs --with-smbwrapper --enable-pam > net ads join -S server.domain.com -U support worked fine.

Hi , I'm using RH9, and I have compiled samba 3.0.1 compiled from sources, with the following options: ./configure --with-winbind --with-winbind-auth-challenge --with-pam \ --with-acl-support --with-ldapsam --with-pam_smbpass \ --with-ads --with-ldap --with-dce-dfs --with-smbwrapper --enable-pam net ads join -S server.domain.com -U support worked fine. I started winbindd.

Hello Samba-List-Users I have a problem with KDC network name resolution. I tried to google it and sought help on IRC#samba, to no avail. So I'll post my problem here. In the spirit of privacy and normalization all server names in this post are replaced. CAPTIAL server names are actually capitalized in the configuration files. Setup: 1x Debian5 x64 server running samba 3.2.5 2x Windows

I'm trying to put my Samba Server in AD Win2008, as I did in the past with Win2003. I'm using smbd Version 3.2.5, winbindd Version 3.2.5, MIT Kerberos 1.6.1-1 and ntpdate synchronized with AD, I follow this howto http://wiki.samba.org/index.php/Samba_%26_Active_Directory and this https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto All my tests demonstrate the successful when I

I'm trying to learn about the interactions between SAMBA and win2k DCs. The eventual goal is to have a Win2k server with ADS working with a freeBSD SAMBA server. I've used the setup from http://oslabs.mikro-net.com/fbsd_samba.html as the basis for what I've done so far. Winbind seems to work and I can show users and groups using wbinfo although I see some things in the logs that I

# smbclient -k -L //radius/music$ krb5_get_credentials failed for radius$@SBRC.LOCAL (Unknown error -1765328352) spnego_gen_negTokenTarg failed: Unknown error -1765328352 session setup failed: NT_STATUS_OK # wbinfo -u Error looking up domain users log: [2004/03/26 10:48:30, 1] libsmb/clikrb5.c:ads_krb5_mk_req(276) krb5_get_credentials failed for shadow$@SBRC.LOCAL (Unknown error -1765328343)

I'm trying to learn about the interactions between SAMBA and Win2k DCs.??The eventual goal is to have a Win2k server with ADS working with a FreeBSD SAMBA server.??I've?used?the?setup?from http://oslabs.mikro-net.com/fbsd_samba.html and many other articles as the basis for what I've done so far. Winbind seems to work and I can show users and gropus using wbinfo although I see some

Hi all. Pretty new in Linux side of the world. I'm trying to run Samba 3.x on Fedora-core-1 in an ADS environment, with krb5 authentication. Installed Samba 3.0.2rc2 from source, installed the required libraries for kerberos MIT, configured smb.conf and krb5.conf. Run net ads join -U administrator and it worked, i can see the machine account in the active directory. From my linux box I

I've just built Samba 3.2.4 on Solaris 10, with ADS support. Domain join to a Windows 2008 domain works perfectly, having pre-created the servername in the appropriate OU. In my winbind logs, I see the following (domain name obfuscated): [2008/11/05 11:28:06, 3] libsmb/cliconnect.c:cli_session_setup_spnego(839) got principal=not_defined_in_RFC4178@please_ignore [2008/11/05 11:28:06,

I'm trying to set up our test box here. Identical versions and setup to our devel box. It is part of the domain (has already been joined). And there was a problem with the secrets.tdb file (corrupted or whatever). winbindd.log: --- [2004/10/20 08:33:46, 1] nsswitch/winbindd_util.c:add_trusted_domain(166) Added domain XXXXXXXX XXXXXXXXX S-1-5-21-1645522239-1202660629-725345543

Hi I cannot make winbind work correctly. My problem is that my AD users & groupes are not authenticated on my samba box. I made it work correctly on my samba 2.2x, an dfrom my understanding, each time a AD user is connected, a Unix account is created, nad winbind synhronize both accounts. It looks like the user script "/usr/sbin/useradd -s /bin/false %u" doesn't work, and my

Please forgive the long post but I am at my wits end here! Below are the files that I have configured, the results of several commands, and some output from log files.... ANY HELP AT ALL??!! wbinfo -p Ping to winbindd failed on fd -1 could not ping winbindd! wbinfo -t checking the trust secret via RPC calls failed error code was (0x0) Could not check secret kinit and klist seem to work

I have users from Domain A trying to browse a domain member samba server in Domain B. Domain A and Domain B are both Windows 2k domains. Domain B has a one way trust to A. A users can browse Domain B Windows server with no problem so I no the trust is fine. Samba version is 3.0.21b on RH Linux ES 3. The winbindd log is giving me the following error: [2006/02/16 08:28:50, 0]

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The net commands work: net ads testjoin, net ads user (after a ticket is created). However, winbindd refuses to run correctly. It has an --set-auth-user configured, but the following commands don't work: [root@nassc01 samba]# wbinfo -p Ping to winbindd failed on fd -1 could not ping winbindd! [root@nassc01 samba]# wbinfo -t checking the trust