similar to: Winbind to more than one Domain

Dear all, Anybody can help me ? I want my samba box to be able to join two different domain and authenticate to those different domains using Winbind. Thank's. Regards, herman > -----Original Message----- > From: Herman (ISTD) [mailto:herman_ang@toyota.co.id] > Sent: 04 Juni 2004 16:41 > To: samba@lists.samba.org > Subject: [Samba] Winbind to more than one Domain > >

Hi all, Is there any way to force Winbind to auhenticate against a certain domain even if another was specified? I'm currently having problems authenticating some users on squid as they seem to inform the wrong domain. I can see messages like these on my cache log: Login for user [PROXY1]\[USERNAME]@[WRKSTATION] failed due to [No such user] The problem is that our domain is not called

Thanks in advance. here's the total firehose drink. I've obscured host, domain, subnet. Hope that will still work for you. Don't want all the info publicized. klist -ket /var/lib/samba/private/secrets.keytab!! there is no /var/lib/samba/private/secrets.keytab klist -ket /etc/krb5.keytab KVNO Timestamp           Principal ---- -------------------

This is my first post to this list. The domain names etc have been changed slightly in the examples below, but you should get the idea. For a long time now (since 3.0.2a?), I have been using the samba 3.0.x series at one of our client sites. The Linux server is joined to a Win2k3 Active Directory. All users are created in the ADS, and the Linux server is able to authenticate them, etc. I

Hi all! I'm trying to setup a linux samba server as a domain member of a SINGLE FOREST MULTI DOMAINS. The forest is a 2 servers acting as a global catalog. Other domains are child domain with implicit trust with forest. I setup a linux server with samba as a domain member to work with squid, authenticating users and verify user's groups membership. I need to allow access to squid only to

If you require and more information let me know and thanks in advance .. I'm working with dansguardian and squid with ntlm_auth. I join squid to the domain and it works for 7 days. After 7 days to the minute from the time I joined the server to the domain winbind decides it has lost its trust. And then squid cant utilize ntlm_auth as it requires winbind to function properly. I'm using

Hi all, I have just installed and configured a squid setup authenticating against Active Directory using kerberos tickets and have achieved the holy-grail of IT - Single Sign On! The problem is that I have two users for whom is does not work. The ntlm_auth logs show that for users that are properly authenticated against squid we get the following (Usernames/Domains/Hosts have been changed for

Hi, I've encountered a really wierd problem the winbind process when trying to start up the samba services, I hope someone can assist I start up the smbd service from the command line (using "smbd -D"), it starts sucessfully When I then attempt to start the winbind service (using "winbind -B") it immediately responds with message: "open_winbind_socket: Resource

Hello list, I encountered a problem in Samba 3.0.23 regarding the winbind use default domain = yes behaviour. It only works for the users an NOT anymore for the Group. So this make getent group to show NETBIOSDOMAINNAME/group which course mail squid configuration to fail. My squid configuration allowed access based on the AD groups, which are provided by Winbindd. Tested distribution: SuSE

Hello all! I have on my network a PDC running w2k with active directory. On this machine i have: nic 1: internet (valid ip) nic 2: hub 1 -> 10.1.1.1 nic 2: hub 2 -> 11.1.1.1 my wins server is running in 10.1.1.1 on pdc. i applied SP3 and all windows updates corrections. on my linux machine i have: kernel: 2.4.19 - samba 2.2.7 - squid 2.5S1 nic 1: internet (valid ip) nic 2: hub 1 ->

I have a problem with winbind resolving global groups on a trusted NT Domain. I want to use SQUID and NTLM Authentification and therefore the external authentification helper needs to check if a user belongs to a given group. When I do 'windbind -r DOMAIN+USER GROUP', only groups of the local domain are listed. It seems as if winbind couldn't find a domain controller for the trusted

Hello, I got a problem using the Squid-winbind-samba-ldap services. Squid 2.5, authenticating with Samba 3.1 through winbind. Problem occurs with internet explorer on Windows XP clients when users authenticate with Squid using NTLM protocol, with clients that are not in the domain. Acces is not allowed until I add the domain information to the user id. When I look at winbind' logs, I can see

Hi I have a question/problem about winbind and the "map untrusted to domain" (=yes) parameter. I use samba 3.6.0 on FreeBSD 8.2 with the following configuration: [global] encrypt passwords = yes map untrusted to domain = yes allow trusted domains = yes client ntlmv2 auth = yes client use spnego = yes client lanman auth = yes client plaintext auth = no winbind enum

I know, I know, this again :) The company I work for would like to use squid for proxy authentication purposes using NTLM, using a Windows 2008 R2 server as a DC. I've managed to setup samba/winbind to use ads and successfully joined the domain. Configured nsswitch.conf to lookup winbind entities (however I didn't touch PAM configuration, as I don't actually want the users to be able

Morning all, Im trying to resolve a problem with the way a new squid server im building handles NTLM authentication for Windows clients that arent part of the default domain. I have two groups of PCs. The first group of PC's are in the same domain as my squid server (which obviously has a working samba running on it as well). This first group of PC's are using NTLM authentication in

Dear Herman, We had the same problems over here. The problem seems to be related to Windows Hotfix KB828741. Removing the hotfix through the control panel solved it for us. Greetz, Jerome Borsboom >>BTW, i use samba 302 & 303 pre2.. >> >>Thursday, April 22, 2004, 2:33:16 PM, you wrote: >> >>CBM> well the subject tell's it.. >> >>CBM>

Hi i have a big problems with WInbind and Squid ... i have join the domain without problems and : [root@gw squid]# wbinfo -t checking the trust secret via RPC calls succeeded [root@gw squid]# [root@gw squid]# wbinfo -p Ping to winbindd succeeded on fd 4 [root@gw squid]# [root@gw squid]# wbinfo -u|more ARN BOULO <...> all work's but when i put : [root@gw squid]# ./wb_group -d

Hi folks, I'm trying to access a share on a RedHat 9 server from a Fedora Core 1 workstation. Here is the environment (pretty vanilla), the error I'm getting, and what I've done to try hunt down the problem. Server, 192.168.1.100, has a share of /home/users/herman Workstation, 192.168.1.101, has a mount point of /home/herman/serverdata smb.conf on server has [global] hosts deny =

Hi all, please cc me, i'm not on the list. Second: All google findable information about problems setting up ntlm_auth for squid with winbind are read and checked more than three times. After breaking a running setup under debian squeeze, i go back to debian lenny to circumvent the actual MIT kerberos problem[1]. [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566977#57 Now i

Hai Amos, Thank you for your very clear responce.. few small questions.. Is there a way to setup the proxy for the following. 1) use negotiate kerberos for auth, ( which is working already for all domain joined machines ) 2) use a fall back that works, for now basic ldap works for non windows machines, and domain joined machines. 3) use any other fallback way for authentication users on windows