similar to: trouble with winbind

I could not get wbinfo -g/u to work and was seeing a bunch of errors related to to not being able to enumerate groups. I saw somebody use idmap backend = ad and added this since I have been struggling to get ad working (still not working). Now, when I run wbinfo -g/-u, I am getting groups and users, but the domain it shows is different than what I expected. My domain I was using for workgroup

I have a samba classic domain, called it "DomainA." All domain controllers and servers are running 3.6.25 on Solaris 11. The PDC and BDC use an LDAP backend for unix, samba and idmap data. Member servers use LDAP backend for unix accounts, so the underlying unix and group accounts are consistent. There is a trust relationship with Windows 2008 AD domain

Hi all, I'm not having any success adding samba (3.0.28 on Solaris 10) to a Windows AD server (2003 R2) per the instructions here: (In addition to much googling) http://us3.samba.org/samba/docs/man/Samba-Guide/unixclients.html#adssdm The error is: bash-3.00# /usr/sfw/sbin/net ads join -U Administrator Administrator's password: Using short domain name -- BETA Failed to set

Hello all, As the subject says, as far as I can tell everything works on my ads integrated samba server. Domain accounts can be used for ssh, and accessing shares, I just can't leave the domain. Here is a successful join command followed by an unsuccessful leave command at debug level 4. Any ideas? TIA, Mark user@dordal:~$ sudo net ads join -U administrator@MYDOMAIN.COM -d 4 [2009/03/19

Hi all, I am having a problem with winbind crashing on our profile server. It is running samba 3.0 alpha 23 on Red Hat 8.0. Here is an excerpt from the winbind log when it crashed: [2003/05/12 14:08:24, 3] libads/ldap.c:ads_connect(267) Connected to LDAP server 192.168.55.6 [2003/05/12 14:08:24, 3] libads/ldap.c:ads_server_info(1917) got ldap server name fozzy@CJNTECH, using bind path:

SLES 9 SP2 samba-3.0.14a-0.4 heimdal-lib-0.6.1rc3-55.15 samba-winbind-3.0.14a-0.4 pam-modules-9-18.10 pam_krb5-1.3-201.7 I've been searching for days for a concrete answer to this question: Is it possible to join an ADS domain from a Linux Samba server without having Administrator privileges? Yes or No. If so exactly what are the minimal requirements for joining the Linux box to the

Hello all, I'm having problems getting Samba to join a Windows AD. I am delegated OU admin, and have no direct access to the domain controller. We have 3 DCs in one domain where my OU exists. The users I wish to authenticate are in a different domain. I have set up Kerberos and can receive tickets correctly. I run net -d 4 ads join createcomputer=[Delegated OU] -U [account with join

Hi List, I'm attempting to join a win2k3 domain as a member server with great difficulty. I've read The HowTo, but am hung when attempting to join the Domain. I can kinit & klist Which seems good, but the ads join fails. Can someone help me understand what is causing the error listed below? Component particulars are: RH AS3, samba-3.0.14a compiled from source (./configure

I tried recreating the trusts. I start by setting up trusts on Windows side, using Active Directory Domains and Trusts on the DomainB AD server. . I specify the the samba domain (DOMAINB) but before I can even specify trust type or direction I get the following: Cannot continue Trust relationship can not be created… The local security authority is unable to obtain an RPC

Hi all, first of all is it possible to join a Linux machine to AD using a windows user account that is not a member of the group Domain Admins? Cause when I do this I get the following error while executing `net ads join -d 3 -U syncuser`: #net ads join -d 3 -U syncuser [2007/12/11 13:47:12, 3] param/loadparm.c:lp_load(4953) lp_load: refreshing parameters [2007/12/11 13:47:12, 3]

Hello, I'm trying to join a win2k3 ADS domain using a working config on a debian 'Lenny' (arm processor) from another machine running gentoo (x86 processor) (only changed the netbios name). Samba versions are 3.0.26a on both the machines. I'm pretty sure this is not a kerberos or ldap problem, anyone has a clue what else it could be? # net -d 3 ads join -U administrator

hi all, I've got an issue during a machine join, my kerberos setup seem to be good (tested with kinit), my current version of samba is : samba 2:3.2.3-1ubuntu3 Example : net ads join -U adm-tsondag Enter adm-tsondag's password: Failed to join domain: failed to set machine spn: Out of memory We've got a very complex AD setup with something like 16 AD servers on distant sites, if you

hey, now after observe last changes on the weekend… i have also the issue. After 10 hours i can’t connect to the shares on my member server. On Log of DC i found this: [2016/10/02 20:35:45.601265, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02

Hello, I am using the brand new SuSE 9.0 with Samba 3.0.0. I installed: Heimdal kerberos development libraries 0.6-67, Openldap development libraries 2.2.22-65, which are shipped with the distribution. If I running "kinit administrator@NWTRADERS.COM" I am getting a ticket. But if I try to run "net ads join -U administrator@NWTRADERS.COM" I am getting following messages:

Hi, I am have compiled samba 3.0.23b (MIT Kerberos 1.5.1) on Solaris 10. I am unable to join the ads domain. net ads testjoin returns the following output... [2006/09/01 17:25:17, 0] libads/kerberos.c:ads_kinit_password(208) kerberos_kinit_password ARTEMISIA$@UNIMELB.EDU.AU failed: Preauthentication failed [2006/09/01 17:25:17, 0] libads/kerberos.c:ads_kinit_password(208)

with samba 3.5.1 if I were to join a server to the domain and specify an OU to create the computer object in, i get Failed to join domain: failed to precreate account in ou (null): Out of memory However, if I run the same command with samba 3.4.5 it works. Did the syntax change? I cannot see anything about it net ads join createcomputer="Linux_Servers" -U <user>%<pass>

I am running Samba ver 3.0.37 on Solaris 10 (sparc) as a PDC with LDAP for the backend for both samba and unix accounts. Assume the samba SMBPDC is called "PDC." I have also set up a trust with an Windows domain- lets call it WINDOMAIN- (the PDC for the Windows domain is Win 2003 but is in mixed mode for backwards compat.) The SAMBA domain trusts the WINDOWS domain, not not vice

After migrating from 3.0.26a to 3.0.30 I cannot join my AD member server to the domain anymore: I get a DCERPC_FAULT_INVALID_TAG. As I didn't change my Windows 2000 SBS Server, this looks like a new feature in Samba 3.0.30. Do I have to also migrate my Heimdal - if so, which version is required? Kind regards, Jens P.S: Is there a way to find out the code changes in Samba 3.0.30? I

Hi List, I'm getting an error join an ADS Domain, using samba 3.0.14a & kerberos 1.3.5. When I look at the debug output from the join attempt, it almost seems as though The join is looking for an OU or something from the AD that doesn't exist. I'm not an Windows person and the AD admins are not around to help peep this out. Can anyone take a look at the debug output below and

Afternoon! Let me apologize first if this is something soooo simple, but i have been working on this for days and I'm still stuck on one part. Where to start. Small user environment (under 100 users) using Active Directory on Win 2k3 server. Running Fedora 8 on a server, and I am trying to get it added to the domain, and to be able to access a share using Windows usernames and passwords.