similar to: pam_winbind problem

Hello, we're using Samba 3.4.12 on older installation of Gentoo (2.6.34-gentoo-r12) to serve files to AD users and after Samba restart, users can't connect to shared folders - error on client side: session setup failed: NT_STATUS_LOGON_FAILURE; errors on server side - Get_Pwnam_internals didn't find user [user]!,check_ntlm_password: winbind authentication for user [user] FAILED with

Ive installed and configured samba using cd samba-3.0.21b/source ./autogen.sh ./configure --with-krb5=/usr/local \ --with-automount \ --with-pam \ --with-utmp \ --with-winbind \ --with-libsmbclient \ --with-ldap \ --with-netlib='-lresolv' make make install cp nsswitch/pam_winbind.so /usr/lib/security cp

Hello all, I am having an issue that I need help with and have been searching the web high and low for a solution. It involvs using winbind to authenticate Linux systems against a 2003 Active Directiry domain with a one-way trust. Here is the lay out. Domain "ABC" is the resource domain where the servers are located. Domain "XYZ" is the domain that the primary user accounts

CentOS 3.5 samba3-3.0.20a-24 Security ADS I can't get windows group permissions on shares to work except for 'domain users'. The windows group I am trying to use is Unix.Samba. This group does not exist on the linux box. It resolves correctly using getent group and when I chgrp files to unix.samba, ls shows the group ownership as Unix.Samba. getent group shows this group with the

Hi, we've had a machine happily authenticating to an ADS domain for about a year now, and it's recently stopped working (possibly due to changes in the domain or a samba upgrade, unfortunately I'm not sure). We're using an ldap idmap backend running on the local machine. Now though, new domain users can't log in. Running "wbinfo -i newuser" returns an error.

I just upgraded from 3.0.23d to 3.0.25 and I'm noticing that winbind is chewing up a lot of CPU usage. There are always 2 winbindd processes and one uses about 80% cpu and the other use 15% cpu. When I run a tcpdump and look at the traffic going to/from the domain controller winbindd is connected to, there is a constant flow of traffic. Here is the winbind setup from my smb.conf file:

Something we noticed after upgrading from 3.0.14a to 3.0.20 and still a problem with 3.0.23c on Solaris 9 Sparc. Windows 2003 server running Active Directory. The examples below are all with 3.0.23c downloaded last week and compiled from source using gcc 3.3.something. 3.0.14a works perfectly using the same smb.conf. We use Samba to do proxy authentication for squid using ntlm_auth and group

Hello Samba folks, I have recently begun seeing some disturbing behavior from winbind. Winbind will fail to look up users and groups. Examples: The machine is configured to use winbind as a nss module. "getent passwd <username>" will yield no results. "wbinfo -n <username>" will yield "Could not lookup name <username>" "wbinfo -g"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Joining a mixed 2000 domain worked correctly for Samba 3.0.2a. After upgrading to either samba 3.0.9 or 3.0.10, the net ads join command completes successfully, and wbinfo -u returns a list of users, but any attempt to actually authenticate those users fails with NT_STATUS_PIPE_NOT_AVAILABLE. wbinfo -t also does not work, and produces the log file

# wbinfo -Y S-1-5-11 Could not convert sid S-1-5-11 to gid # wbinfo -Y S-1-5-13 Could not convert sid S-1-5-13 to gid (S-1-5-11 are the Authenticated Users, S-1-5-13 are the Terminal Server Users.) This bug was finally solved in release 3.023d. Now it is back again. How can I get this working? I'm using idmap/tdb - would another idmap-module solve this issue? The winbind log looks like

Hi now, i have added my server to my AD, the command net ads join work's and with kerberos, i can verify login/pass. But when i sent wbinfo -t i have: [root@server samba]# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND (0xc0000233) Could not check secret i don't know why he don't see the DC ... anyone have a idea ?

We have a problem with our setup that exposed another problem in winbindd. Setup: Samba 3.0.1, openLDAP 1.2.23 for idmap backend using port 1389, security=ads (w2k). All works after we get the daemons started successfully. The first issue has to do with the initial setup of both a Samba server [smbd, nmbd, winbindd, slapd], and a Samba client [just nmbd and winbindd]. We do the

Hi, I have winbind joined to a Win2003 AD domain with rid idmap backend. Almost everything's working. wbinfo -u and -g work fine, as does getent passwd and getent group. I can also getent by ID number. The only thing I can't do is getent by name, which is preventing logins: root@services2:/etc/pam.d# net ads testjoin Join is OK root@services2:/etc/pam.d# getent passwd | grep david.croft

Has anyone else gotten samba functioning with idmap_ad and multiple domains? In our environment we have a domain with two child domains. There is one child domain for students, and another for faculty staff. Our servers are joined to the student domain, but need to be able to enumerate users in the staff domain. When attempting to lookup a user (wbinfo -i 'NAU\car3') that only exists

We have a Samba PDC (Mandrake 9) a BDC (RH 7.3) and a Memberserver (Solaris 2.8). A configuration which is working OK in 3.0.1 seems to be broken in 3.0.3. Everything (except NTLM authentication) has been working fine. After installing 3.0.3 you cannot list domain users and the member server doesn't recoginize users as domain members. wbinfo gives the following results On PDC, BDC and

Dear list, Do any of you use the latest(3.0.4) as a Samba PDC(with OpenLDAP) on Linux ? If yes, have you encountered the following problem ? The setup is a PDC with an LDAP server running locally which is accessed directly and through nsswitch/PAM. A member server is providing shares to clients. When looking up domain users (wbinfo -u) from a member server(Solaris 8, OpenLDAP 2.1.25) there are

Hi, I'm using samba 3.0.23c, and having a bit of trouble getting it to play nice with my active directory. I'm using Windows Small Business Server 2003 with the SFU 3.5 NIS server/schema extensions installed. I have samba configured to use ad as the idmap backend, and sfu for nss info. When running getent passwd, only a few active directory users show up, and I get lots of errors

Hello, I'm using samba 3.0.0. Win2k clients on my network can access their fileshares without entering their username/password as long as their username and password exist in smbpasswd on the Samba server. Now I'm trying to have that information grabbed from ADS so that their passwords are kept synchronized but am having problems with winbindd. winbindd is running but I get nothing

(samba 3.0.2a via RPM, ADS, SuSE 9) Every day Windbind stops responding, although the process is active. When this happens, getent passwd returns just local users, and wbinfo -u returns "Error looking up domain users" If i 'reload' winbind, nothing changes, but if I 'restart' it, it works again, for another day. Any ideas? log.winbind, after a wbinfo -u, follows:

Hi all, I have a Samba configuration that was in place on Ubuntu Warty (samba 3.0.7) workstations to allow winbind to authenticate domain users on them. These computers have since been re-installed with Ubuntu Hoary (samba 3.0.10) with the same configuration. The workstations have been successfully joined to the domain using `net rpc join`. `wbinfo -t` shows that the trust between the