similar to: DN Lookup

Hi there, I'm using Samba 3.0 beta 3 on RH 9 (connecting to a Windows 2000 domain, as a member server) and I'm having trouble keeping samba running reliably. At random times it seems to stop recognising names from the domain. Restarting winbind fixes the problem, but then it occurs randomly again, usually once or twice a day. At least once it has fixed itself after being broken overnight

Hi, today we found the reason for a problem with Group-Memberships when running Samba as an ADS Domain Member. 1. Short Summary of the Environment =================================== = "old" Systems: - donald: Microsoft Windows 2000 as ADS Controller with 2 (daisy, tick) Backup Controller - 800 Users mostly replicated from Microsoft Exchange - 65 Groups - fix: Samba 2.2.8 on

Samba version is 3.0.10 on Gentoo linux. I am trying to use idmap_rid backend in a Windows AD environment, the Linux PC acting only as a domain member. I am using idmap_rid because I need UID/GID predictability. I can log in to console correctly, and it shows the right user and the "Domain Users" as the group. When I use default winbind TDB, I can browse the home directory from an XP

Hi, we've got a samba-3.0.21a-1 systems that's set up w/ winbind to query AD to authenticate users w/out Unix accts. The system is also set up to support our LDAP'd UNIX accts. After setting the [global] section like this: [global] realm = WIN.OURDOMAIN.COM security = ads password server = thebes balsam encrypt passwords = yes log file = /var/log/samba/log.%m

Hi, on a customer system samba/winbindd is used for windows and unix authentication. I just tuned searches of the ldap backend to speedup by factor 20-200 and slapd now doesn't seem to be the bottleneck anymore. Don't know how well the windows authentication now works, since this is presently done by the heartbeat failover server. However, simply starting 'mc' as root makes

After some more screwing around with leaving and rejoining the ADS domain I was finally able to access a share with "valid users =" set to a domain group I was a member of. The _only_ change I made after this was to add yet another group to the valid users on the share and restart samba...after that I could no longer access the share. I removed the additional group, restarted samba and

I've recently upgraded from a 3.0.4 (or 3.0.6, I don't remember) to Samba 3.0.10 on a FreeBSD 5.2.1 system and now I'm having problems with winbind. It seems to run fine for a while, but then it hangs and starts taking a lot of CPU time (80-90% while idling), eventually it dumps core. I commented out the 'client use spnego' line because that caused winbindd to hang

Hi, Just compiled latest version of samba and trying to get Samba to work with AD. I am at the point where I wbinfo -t, wbinfo -u, wbinfo -g and wbinfo -ausername%password work, but I cannot get getent passwd and getent group to gather any AD info. I have noticed the following errors in /var/log/samba/smbd.log [2006/03/09 16:37:16, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for

Hello All! I'm pulling my hair out as I cannot figure out why I'm missing users from many groups after integrating and re-integrating over and over. Example, AD group: Domain Users, has 400 users in it , but after integrating and performing command: [EMAIL PROTECTED] samba]# getent group | grep "Domain User" COF+Domain Users:x:16777223:COF+gisguest Check it out one user!

Hi there, I have just discovered that my winbind installation (3.0 alpha 24 w/ACLs, RH 8.0, connected to a Windows 2000 ADS domain) seems to be no longer mapping groups correctly. Executing the "groups" command for any particular domain user fails, complaining that it can't get the group name for various winbind-ranged gids. Doing an ls of a directory created from Windows via samba

All, After upgrading to samba 3.0.30 on gentoo amd64 because of my recent best friend CVE-2008-1105 My winbind daemon is 'hanging up', and refusing to respond to pings after a few minutes of activity. Wbinfo -u, getent passwd all work successfully, then after a bit wbinfo -p just tells me winbind dies. I have 3.0.30/winbind on another machine, also amd64 that is working.... So

I'm trying to learn about the interactions between SAMBA and Win2k DCs.??The eventual goal is to have a Win2k server with ADS working with a FreeBSD SAMBA server.??I've?used?the?setup?from http://oslabs.mikro-net.com/fbsd_samba.html and many other articles as the basis for what I've done so far. Winbind seems to work and I can show users and gropus using wbinfo although I see some

Whoops, forgot to copy to the list Guillermo Gutierrez _________________________ (818) 575-2017 (818) 324-0871 ggutierrez@marketscan.com -----Original Message----- From: Guillermo Gutierrez Sent: Wednesday, December 05, 2007 3:24 PM To: 'Max Le?n' Subject: RE: [Samba] 3.0.27a, ubuntu server7.10 auth issues Interesting...i didn't have the idmap setting in there previously and it

Noticed this in /var/log/samba while I was applying 'getent groups|grep groupname ' [2004/11/09 10:29:04, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Performance Monitor Users !? [2004/11/09 10:29:04, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid for Terminal Server License Servers !? [2004/11/09 10:29:04, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) No rid

Hi All, I've been having a problem recently with LDAP queries for group names in winbind. I'm fairly certain the problem is to do with the fact that I'm using a round robin dns name for the password server. When samba starts it attaches itself to what I presume is the first server that returns from the dns lookup. When that server is taken down for maintenance it causes winbind to

I am running RH8 with the Samba-alpha3.23 from the RPMs. I was able to use Kerberos to add machine to a Windows AD domain without any problem and was able to get winbind to function properly. I was able to get group & user listing using wbinfo -g & -u, -t responds with proper information. I have run getent for passwords & groups. Since what appeared to be a successful getent, my

Hi, since yesterday morning i get an error compiling the cvs-tree of samba: Compiling nsswitch/winbindd_ads.c nsswitch/winbindd_ads.c: In function `trusted_domains': nsswitch/winbindd_ads.c:819: error: incompatible types in assignment make: *** [nsswitch/winbindd_ads.o] Fehler 1 is it possible the cvs-tree is a little bit broken? Christoph

Hi, We recently upgraded some AD member file servers from 4.6.7 to 4.6.11. Since then, "getent group" has been failing to return groups properly after winbind's been running for a couple of days. We have a lot of entries in log.wb-<DOMAIN> like this: [2017/12/15 11:39:47.959368,  1] ../source3/winbindd/winbindd_ads.c:1236(lookup_groupmem)   lsa_lookupsids call failed

OK, issuing this command: $ getent passwd tunix Produces in /var/log/log.wb-STUDELEC-SA: 2015/06/22 12:32:37.473115, 4] ../source3/winbindd/winbindd_dual.c:1346(child_handler) Finished processing child request 20 [2015/06/22 12:32:37.473241, 4] ../source3/winbindd/winbindd_dual.c:1338(child_handler) child daemon request 20 [2015/06/22 12:32:37.473278, 3]

Hi we have a Samba-Winbind 3.5.10 and i have a big quantity of errors in logs : [2012/09/24 16:01:29.248286, 1] winbindd/winbindd_ads.c:728(lookup_usergroups_memberof) lookup_usergroups_memberof ads_search member=CN=TESTDD,OU=Villeurbanne,OU=ExEA,DC=ELIOTT,DC=fr: Out of memory [2012/09/24 16:03:38.498533, 1] libads/ldap_utils.c:323(ads_ranged_search_internal) could not pull first