similar to: Authenticating off a Windows 2003 ADS DC with Samba/Winbind

[originally posted to fedora-users] I'm having difficulty getting samba/winbind to authenticate of a W2K3 box. I've searched the list archives and although there are some similar problems, none have seemed to help resolve this one. Here's the network configuration: - Windows 2003 Server gx270-rmaniar [192.168.0.100] - Fedora Core 3 gx280rmaniarFC3 [192.168.0.5] FYI: A Windows XP box

About a month ago, I setup a Windows 2000 native-mode domain, and had a couple of Linux machines join the active directory. I followed the steps outlined in the Samba 3.0 docs regarding winbind/PAM/NSS. The machines joined the domain fine, and 'wbinfo -t', as well as 'wbinfo -u/-g' and 'getent passwd/group' return expected results. Connecting from other Windows clients

WHY HELLO. i have a centOS 4.4 machine running samba 3.0.10-1.4E.9. my goal is to log in to the machine using AD credentials. at the moment, i'm successfully logging in, but i can't retrieve groups for AD users: -bash-3.00$ groups id: cannot find name for group ID 16777216 16777216 id: cannot find name for group ID 16777217 16777217 id: cannot find name for group ID 16777218 16777218 id:

hi, i know that the first thing i'll hear is rtfm. but i allready read it 4 times and spend some nights over this problem. i got a debian woody (stable) linux box with samba 2.2.3a-12.3 and winbind for the samba version. the nt-domain is PORTA#001-NT. my first question is: is the # in the name a problem? my second question: do i have to create a computer account on the pdc of the domain

I'm runnign Samba 3.0.2a on Suse Linux 8.2 and I've the same problem as descriped here http://lists.samba.org/archive/samba/2003-July/070784.html . Is this problem already solved. If yes can anybody tell me how? best regards thomas Thomas Lang, INTENTIA Austria System Engineer Seering 5/32, A-8141 Unterpremst?tten / AUSTRIA Phone: +43 (0) 3135 56550 Cell Phone: +43 (0) 664 6119619

Yohoo! We want to authenticate our Cisco admins to freeradius. This should authenticate to our running AD (W2003Srv). Googling for freeradius and AD tells me to use ntlm_auth. For ntlm_auth I need a running winbindd. And kerberos. And there's my problem. Status: I configured the /etc/krb5.conf "kinit admin@MY.DOMAIN" asks for the password and gives me a ticket for one week.

I'm trying to set up a Linux box to authenticate users against AD (Win 2003) using winbind by following the Official Samba-3 HOWTO (http://samba.org/samba/docs/man/Samba3-HOWTO/winbind.html). We're running Redhat AS 3 and Samba 3.0.9. Our smb.conf look like this: [global] winbind separator = + idmap uid = 10000-20000 idmap gid = 10000-20000 winbind enum users = yes winbind enum groups

Sorry if this sounds like an advertisement, but in the past 6 weeks or so there have probably been close on 100 questions on getting Winbind working. For those of you who are new to linux/samba, you may want to consider using Mandrake 9.0 for your first implementation, since *everything* (ok, there is one bug which I will mention) is taken care of for you. When installed in expert mode, you

So, I've finally gotten around to installing a Samba4 AD DC. I've joined a Win7 and Ubuntu machine to the domain so far, and all works perfectly. Great job guys, it's nice to see this functionality working solidly on Samba! The problem is coming in on the actual DC host. My Ubuntu laptop is running winbindd 3.6.18, and as I said, all went flawlessly. The DC host is running

Hello list: I recently installed and configured samba4 file server.I add it to domain succesfully ,then configuring shares with but I couldn´t acces to shares. I provisionesd samba AD DC without rfc2307.This log.samba say: [2016/02/17 16:09:04.653139, 0] ../source4/auth/unix_token.c:107(security_token_to_unix_token) *Unable to convert SID (S-1-5-32-554) at index 7 in user token to a GID. *

Jason, I used these. http://www.enterprisenetworkingplanet.com/netos/article.php/3487081 http://www.enterprisenetworkingplanet.com/netos/article.php/10951_3502441_1 Dale -------- Original Message -------- Subject: Re: [Samba] Authenticating Linux Against AD with Winbind Date: Tue, 10 Oct 2006 11:43:11 -0400 From: Aaron Kincer <kincera@gmail.com> To: Jason Rotunno

Dear Samba Team/Readers: I have been reading the mailing lists looking for a solution to a particular problem that I am having: The Setup: centos 4.3 (redhat enterprise server clone) running kerberos, samba Version 3.0.10-1.4E.2, 32 bit system. Running stock kernel 2.6.9-22. I am authenticating to a windows 2003 server, standard edition, with all service packs and patches applied. I am using

Hello guys, I got a few questions about winbind / samba and multi domain authentication. At my company we have to different domains. DOMAIN-A and DOMAIN-B My smb.conf is attached (global section only). My linux server (rhel 5.4 x64) is configured with the security mode "ads" and has been joined to the DOMAIN-A via "net ads join DOMAIN-A -U administrator" I can see the

We have a samba 3.0.7 server on RHEL-3 (rain) joined as a domain member (security = domain) to a win2k pdc (clouds) for the domain DOM. We have several unix users and two Win-only users. The unix users have matching AD accounts on the win2k, but the Win-only users do not have unix accounts (and we want to keep it that way). So, it seemed that winbind would be the best way to bridge the gap: 1.

I apologize in advance if this is a FAQ, but I couldn't find the FAQ document for this list. I also could not find anything relevant in other Samba documentation sources like http://hr.uoregon.edu/davidrl/samba.html. There seems to be plenty of information about using Samba *as* a DC, but I want to know if I can use Samba *with* a Windows 2000 DC. We have two DCs running Windows 2000, a W2K

https://bugzilla.mindrot.org/show_bug.cgi?id=3178 Bug ID: 3178 Summary: When authenticating with a -sk key, no 'touch security key' prompt displayed Product: Portable OpenSSH Version: 8.2p1 Hardware: amd64 OS: Linux Status: NEW Severity: minor Priority: P5

I have a windows 2003 server and a SAMBA file server. I appear to have joined the ads realm. When I do a klist I have 3 tickets. for krbtgt,kadmin,kdc server from my SAMBA file server I can access all shares on windows 2003 machine. When my 2003 clients try to access the samba file server they get the login box. It doesn't matter what you enter it will not allow access. My windows 2003

The article at http://windows.ittoolbox.com/documents/document.asp?i=1893 is a little dated. Digital signing is also required in my AD, something this article said was not available at time of writing (06/13/03) but would be incorporated into the final release of Samba v3. My machine is a mail server, so the file/print sharing will not be used initially. Would just like to have a way to

I've got a samba 3 ads domain member server that is not able to authenticate users in trusted domains of the ADS domain of which it is a member. Windows 2000 ADS PDC A trusts a Windows NT-4 domain B and a Windows 2000 ADS domain C Solaris 9 Samba 3.0.6 member server of ADS domain A If I use getent passwd on the Solaris 9 server, I get all the users in Domain A and B , but no in Domain C,

I have been trying to get Samba 3.0.22 to authenticate to our Active Directory 2k3 environment for about 3 weeks now. I have gotten to a point where google searches are no longer helpful. We have an IBM 9133 server on AIX 5.3. I had to use the binaries because the sources failed the make install. We are using IBM's version of Kerberos Network Authentication Service because the MIT version