similar to: idmap_sid_to_uid is not get called?

We have a problem with our setup that exposed another problem in winbindd. Setup: Samba 3.0.1, openLDAP 1.2.23 for idmap backend using port 1389, security=ads (w2k). All works after we get the daemons started successfully. The first issue has to do with the initial setup of both a Samba server [smbd, nmbd, winbindd, slapd], and a Samba client [just nmbd and winbindd]. We do the

This is driving me nuts, I see many people have posted similar questions but have yet to see a reply HAS ANYONE any idea why I am getting this? 2005/09/29 15:01:18, 5] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(612) NTLM CRAP authentication for user [DOM]\[user] returned NT_STATUS_OK (PAM: 0) [2005/09/29 15:01:18, 3] nsswitch/winbindd_acct.c:winbindd_create_user(880) [1617926]:

Winbindd is having trouble finding the Domain Admins group in my domain. It appears to be searching for the group but does not show what domain it's looking into - then it tries the local PC (ANC-Gentoo): log.winbind: [2004/01/07 13:20:43, 3] nsswitch/winbindd_group.c:winbindd_getgrnam(237) [23792]: getgrnam Domain Admins [2004/01/07 13:20:43, 5] nsswitch/winbindd_acct.c:wb_getgrnam(522)

Hi, I have reported this(and seen similar problems by others) before. I took the plunge today and trace into the source to see what happened. The result seems to be that winbind(or the nsswitch part) would never work in a PDC/BDC situation, only for other trusted domain(probably). Below is my analysis. I have setup nsswitch.conf and pam.d/login properly so libnss_winbind and pam_winbind are

I'm having a *terrible* time trying to get Samba 3 to communicate with my Windows 2003 Active Directory Server (the primary and only domain on my network). Basically this is what I'm trying to do: create a Linux File Server to replace my old WinNT 4 File Server. I would like it to show up under all my XP clients on network neighborhood just like the old server, with each account on my

As of RC3 and RC4, I've noticed that winbindd's wb_getpwuid function is using the form <FQDN-domain><winbind-seperator><username>, and before, it was simply <NetBIOS-domain><winbind-seperator><username>. The net effect of what I'm seeing is that users which have a UNIX account locally on the samba box and also a domain account are being

Hey, I've troubles with a samba-installation ( version 3.0.2, HP-CIFS-Technologie Preview ) on HPUX 11i. I want to setup a fileserver within a customerenvironment connecting into a windows 2000 domain, which contains a lot of trusted domains. I have joined the domain already and wbinfo brings me the list of users and groups. Also within the winbind_imap.tdb I see some entrys which seems to

Greetings, I'm new to Samba and I'm wondering where I went wrong.... My setup: Two FreeBSD 5.1 machines Samba 3.0.1r2 from ports collection One tdbsam domain controller and one member server - domcon and memsrv My problem: I've been working on this for a few days and still scratching my head. I can view the base directory of the member server (only as root). But when I try to

Hi! samba 3.0.6 AIX 5.1 ML5 AD 2003 native mode I have big problems to get AIX auth against a AD with winbind The problem is the primary grouplookup idefix#lsuser adminanla adminanla id=10000 pgrp=Domain Users idefix#id adminanla uid=10000(adminanla) gid=10000 [2004/07/22 16:20:13, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(124) [13174]: getpwnam adminanla [2004/07/22 16:20:13, 3]

Hi all! This is getting strange: 3d installation - the same problem... This is the log: (pay attention to the LAST line) Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.debug] Plain-text authentication for user DorofeevMS returned NT_STATUS_OK (PAM: 0) Feb 20 12:10:58 as09-tmn pam_winbind[452]: [ID 614614 auth.notice] user 'DorofeevMS' granted acces Feb 20 12:10:58

I have problems with SID to UID mapping using winbind on a FreeBSD 5.2/Samba 3.0.4 as a member server of a Win2k domain controller. I use heimdal-0.6.1 for kerberos. I would like my XP machines in the domain to use the share with the user accounts defined in Active Directory. At a first glance it seems to work: the connection to the share succeeds without a prompt for a password. Users may

CentOS 3.5 samba3-3.0.20a-24 Security ADS I can't get windows group permissions on shares to work except for 'domain users'. The windows group I am trying to use is Unix.Samba. This group does not exist on the linux box. It resolves correctly using getent group and when I chgrp files to unix.samba, ls shows the group ownership as Unix.Samba. getent group shows this group with the

I'm seeing the following errors on my SAMBA printserver in the winbindd log : [2005/03/03 14:56:53, 3, pid=3736] nsswitch/winbindd_user.c:winbindd_getpwuid(225) [24610]: getpwuid 10140 [2005/03/03 14:56:53, 3, pid=3736] nsswitch/winbindd_user.c:winbindd_getpwuid(225) [29198]: getpwuid 10266 [2005/03/03 14:56:54, 3, pid=3736] nsswitch/winbindd_misc.c:winbindd_ping(238) [ 6364]: ping

I am running Samba version 3.0.9-1.3E.2 on a server that is joined to a windows server 2003 domain using ADS security. The samba server hosts a share called 'files'. I am having problems mounting this share using a new account I set up. getent passwd shows the information for the new account as does wbinfo -u. Mounting the share with the new users account using the net use command

I've gotten passed the problem I had with joining the domain. However, I am still having problems with the authentication of domain user accounts against the samba server. wbinfo -u shows my users from the domain correctly. wbinfo -g does the same for my domain groups. getent passwd shows the domain users as expected. wbinfo -t shows a good trust. wbinfo -a allows me to authenticate any

I just upgraded from 3.0.23d to 3.0.25 and I'm noticing that winbind is chewing up a lot of CPU usage. There are always 2 winbindd processes and one uses about 80% cpu and the other use 15% cpu. When I run a tcpdump and look at the traffic going to/from the domain controller winbindd is connected to, there is a constant flow of traffic. Here is the winbind setup from my smb.conf file:

How long does the availability last? > From: "Will Hughes" <will@aghealth123.com> > Date: Thu, 1 Apr 2004 10:02:32 -0600 > To: <samba@lists.samba.org> > Subject: [Samba] Samba Active Directory Restart > > I am having an issue where I can not connect from an XP box on the > Win2000 AD domain. If I restart samba and winbindd I can then connect >

Hi I have a problem with an interdomain trust where on the PDC for DomainA, everything works perfectly. getent returns local and DomainB usernames. On the PDC for DomainB, it's DomainB works fine, but getent only returns local usernames and groups, it doesn't return the usernames or groups for DomainA. wbinfo -u and wbinfo -g work fine and return all DomainA's usernames and groups.

I am running Samba 3.0.9/KRB5 1.4 on Centos 3.4 on x86 with security = ADS in a Win2k3 domain. I have successfully used kinit to authenticate, joined the domain, and wbinfo -g/-u/-t return the expected results. However, when I try and access the samba shares from a Win2k3 box, it fails telling me I don't have permissions to access the share. Needless to say I am thoroughly perplexed. I have

I want to limit access to shares via windows groups but when I set a share to anything other than 'valid users = %S' or 'valid users =', I cannot access the share. The error message indicates that the share is not accessible and I may not have sufficient permissions. If I change just the valid users in smb.conf and restart smb, I get right in without prompting. I also found that I