similar to: Log shows NT4 for an ADS domain

I'm trying to learn about the interactions between SAMBA and Win2k DCs.??The eventual goal is to have a Win2k server with ADS working with a FreeBSD SAMBA server.??I've?used?the?setup?from http://oslabs.mikro-net.com/fbsd_samba.html and many other articles as the basis for what I've done so far. Winbind seems to work and I can show users and gropus using wbinfo although I see some

Hi I cannot make winbind work correctly. My problem is that my AD users & groupes are not authenticated on my samba box. I made it work correctly on my samba 2.2x, an dfrom my understanding, each time a AD user is connected, a Unix account is created, nad winbind synhronize both accounts. It looks like the user script "/usr/sbin/useradd -s /bin/false %u" doesn't work, and my

I'm setting up Samba in an environment with 2 Active Directory domains setup with a one way trust (DOMAINA -> DOMAINB). Samba is in DOMAINA. From looking at the logs (see below) it appears that winbind is having troubles getting the credentials for the domain controller in DOMAINB. I can get tickets, using kinit, for accounts in both domains. I can join DOMAINA just fine. Running

I recently upgraded my PDC's and BDC's to 3.0.14a but my member servers are still running 3.0.10. Today users complained that the couldn't logon to the member server. When I try to run a wbinfo -u I get: Error looking up domain users Here's the log.windbindd: 2005/05/31 11:06:26, 4] param/loadparm.c:lp_load(3933) pm_process() returned Yes [2005/05/31 11:06:26, 3]

Hi list, I've just upgrade my current samba config to 3.0.23c on Suse 9.1. x86 I join my active directory 2003 domain and 'getent passwd' works fine but each time I run 'getent group' winbind crash I deleted the winbindd_cache.tdb but nothing better wbinfo -u / wbinfo -g works wbinfo -t tells "checking the trust secret via RPC calls succeeded" Can someone help me I

If you require and more information let me know and thanks in advance .. I'm working with dansguardian and squid with ntlm_auth. I join squid to the domain and it works for 7 days. After 7 days to the minute from the time I joined the server to the domain winbind decides it has lost its trust. And then squid cant utilize ntlm_auth as it requires winbind to function properly. I'm using

Hi all, I've downloaded and installed the 3.0.2pre1 package. However, I've not managed to get winbindd working. I've run into a credentials cache problem (so I haven't been able to even get to the point I was at before). My krb5.conf and pam settings haven't changed and I'm using the same smb.conf as before. I'm using MIT Kerberos 1.3.1 (in /usr/kerberos/). Here

HI, I am sorry I forgot to post the problem that I am having. It is the same issue who posted this e-mail originally. Please let me know what should I do to fix the problem that I am having. Edit /etc/samba/smb.conf [global] realm = KERBEROS.REALM security = ADS encrypt passwords = yes password server = kerberos.server Edit /etc/krb5.conf [libdefaults] default_realm = KERBEROS.REALM

Hi I am trying to configure Samba with ADS integration on AIX 5.2. I am unable to login to the Aix server using credentials of Domain user. I am able to join to windows Domain and able to fetch list of windows domain users with the command /usr/local/samba/bin/wbinfo -u and also the groups with usr/local/samba/bin/wbinfo -g . I have added the below line methods.cfg WINBIND

Having some trouble with the setup of winbind: This command fails: [root@rhsrv local]# /usr/local/samba/bin/net rpc join -S PRIV_DOMAIN -U domain_admin Unable to find a suitable server Unable to find a suitable server Here's the output of winbinds log, I only included what looked useful: ... [2004/08/17 11:11:30, 5] nsswitch/winbindd_cm.c:cm_open_connection(256)

Hi list, I have samba-3.0.2-2 rpm installed on Redhat Enterprise Linux 3 AS kernel version. I've been using the Samba 3 How-To and messages on various mailing lists to join Samba to an AD domain and authenticate using winbind/pam. So far Samba has successfully become a member of the AD domain and can browse file servers using smbclient but I haven't been able to get winbind working -

I am running RH8 with the Samba-alpha3.23 from the RPMs. I was able to use Kerberos to add machine to a Windows AD domain without any problem and was able to get winbind to function properly. I was able to get group & user listing using wbinfo -g & -u, -t responds with proper information. I have run getent for passwords & groups. Since what appeared to be a successful getent, my

I'm using RH9, and install Samba 3.0.0 by using rpm package. I use following configure files. /etc/samba/smb.conf: [global] workgroup = DOMAIN realm = DOMAIN.COM server string = Demo Samba Server security = ADS username map = /etc/samba/smbusers log file = /var/log/samba/log.%m max log size = 50

Hello maorui/all, I have the same problem, with the Debian 3.0r2, using samba 3.0.1 compiled from sources, with the options: ./configure --with-ads --with-winbind --with-winbind-auth-challenge --with-smbmount --prefix=/usr --with-ldap --with-pam_smbpass --with-syslog --with-utmp --with-swatdir=/etc/samba/swat --with-libsmbclient --with-acl-support --with-quotas --with-pam --with-nisplus-home

Help, wbinfo -t fails with the error in subject, and getting sids of groups that aren't BUILTIN fail. Everything else seems to work. Note: I am not converting my kerberos tickets to krb4, is this necessary? (It used to work without it..but now it seems not to work.) I get no errors from kinit. all other wbinfo requests succeed with the exception of looking up the SIDS of groups that

Hello, I've been able to get Samba up and running, it joins the ADS domain fine. It appears in the network browser on our Windows machines but when anyone attempts to access a restricted share it fails to authenticate them. I say restricted because if anyone accesses an open to everyone share it works. I'm trying to get the entire thing setup so that the Samba server is just a

Hello dear list! I'm about to setup a winbind to authenticate my proxy users through Active Directory. Unfortunately the daemon winbindd crash while requesting some wbinfo, Here is a transcript of the problem: IDCSRV922:~ # cat /etc/krb5.conf [libdefaults] default_realm = MY.DOMAIN.COM [realms] [logging] kdc = FILE:/var/log/krb5/krb5kdc.log

I am having horrendous issues with trying to get Samba 3.0.4 to join to a Windows 2000 AD (patched to current). As this one is hurting a bit and needs to be fixed soon, I was hoping I may find salvation in this list from someone here who may be able to shed some useful light on this issue. I am using the latest gentoo mit-krb5 build. Net join always results in NT_STATUS_ACCESS_DENIED - this

Hi there I'm having trouble getting winbindd working properly (I think). My understanding is that winbindd uses a kerberos 5 session (with 2003 server) to authenticate the machine to ADS, before any users have logged in. Then it uses that session ticket to authenticate all users of the smb server. Is that correct ? I can run kinit ok, and klist shows me a krb5 ticket (using a Domain

Using Samba 3.0.1 packages from samba.org on RH 8.0 kernel 2.4.20. I'm trying to get winbindd configured so that we can do single-sign on across Win2k file servers and Samba file servers with ADS. I've configured Samba to do shares but it prompts for username/password unless the user/pass exists in smbpassword. 'net ads join' was successful and secrets.tdb was modified. The