similar to: Samba & Active Directory Trust

Help, wbinfo -t fails with the error in subject, and getting sids of groups that aren't BUILTIN fail. Everything else seems to work. Note: I am not converting my kerberos tickets to krb4, is this necessary? (It used to work without it..but now it seems not to work.) I get no errors from kinit. all other wbinfo requests succeed with the exception of looking up the SIDS of groups that

I'm trying to learn about the interactions between SAMBA and win2k DCs. The eventual goal is to have a Win2k server with ADS working with a freeBSD SAMBA server. I've used the setup from http://oslabs.mikro-net.com/fbsd_samba.html as the basis for what I've done so far. Winbind seems to work and I can show users and groups using wbinfo although I see some things in the logs that I

Hi I am trying to configure Samba with ADS integration on AIX 5.2. I am unable to login to the Aix server using credentials of Domain user. I am able to join to windows Domain and able to fetch list of windows domain users with the command /usr/local/samba/bin/wbinfo -u and also the groups with usr/local/samba/bin/wbinfo -g . I have added the below line methods.cfg WINBIND

I've just built Samba 3.2.4 on Solaris 10, with ADS support. Domain join to a Windows 2008 domain works perfectly, having pre-created the servername in the appropriate OU. In my winbind logs, I see the following (domain name obfuscated): [2008/11/05 11:28:06, 3] libsmb/cliconnect.c:cli_session_setup_spnego(839) got principal=not_defined_in_RFC4178@please_ignore [2008/11/05 11:28:06,

Yohoo! We want to authenticate our Cisco admins to freeradius. This should authenticate to our running AD (W2003Srv). Googling for freeradius and AD tells me to use ntlm_auth. For ntlm_auth I need a running winbindd. And kerberos. And there's my problem. Status: I configured the /etc/krb5.conf "kinit admin@MY.DOMAIN" asks for the password and gives me a ticket for one week.

I've been trying to get Kerberos to work for the last couple of days so that we can use SSO. I can't seem to get past a roadblock and Google doesn't seem to provide any answers. I've got Samba connected to the AD and running. I can wbinfo everything and can login to the machine using PAM with the pam_winbind modules just fine. I can get user tickets just fine. When I try to get ssh

Hello dear list! I'm about to setup a winbind to authenticate my proxy users through Active Directory. Unfortunately the daemon winbindd crash while requesting some wbinfo, Here is a transcript of the problem: IDCSRV922:~ # cat /etc/krb5.conf [libdefaults] default_realm = MY.DOMAIN.COM [realms] [logging] kdc = FILE:/var/log/krb5/krb5kdc.log

Hi I cannot make winbind work correctly. My problem is that my AD users & groupes are not authenticated on my samba box. I made it work correctly on my samba 2.2x, an dfrom my understanding, each time a AD user is connected, a Unix account is created, nad winbind synhronize both accounts. It looks like the user script "/usr/sbin/useradd -s /bin/false %u" doesn't work, and my

Hey all. I've just upgraded my samba to the latest binaries from the Samba site. After the upgrade, without touching my smb.conf winbindd crashes just after startup. I'm running Version 3.0.7-1.1-SUSE , from the samba.org rpms. PDC is a Windows 2003 Server box. Running 3.0.6 I was experiencing a problem where user authentication to the w2k3 was lost a few minutes after starting smb,

Hi, first i?ve installed SuSE 9.1 with the default rpms (heimdal 0.9.1rc3, samba 3.0.2a with winbind). I?ve configured the system with winbind to the user accounts from my Win2003 Server. All this works always max. 1 day. After this day I can?t connect to my shares on the samba server. After this I upgraded to 3.0.11 with the RPMs from de.samba.org for SuSE. I installed this rpms but Winbind

Having some trouble with the setup of winbind: This command fails: [root@rhsrv local]# /usr/local/samba/bin/net rpc join -S PRIV_DOMAIN -U domain_admin Unable to find a suitable server Unable to find a suitable server Here's the output of winbinds log, I only included what looked useful: ... [2004/08/17 11:11:30, 5] nsswitch/winbindd_cm.c:cm_open_connection(256)

Using Samba 3.0.1 packages from samba.org on RH 8.0 kernel 2.4.20. I'm trying to get winbindd configured so that we can do single-sign on across Win2k file servers and Samba file servers with ADS. I've configured Samba to do shares but it prompts for username/password unless the user/pass exists in smbpassword. 'net ads join' was successful and secrets.tdb was modified. The

Hi Samba team! I tried with 3.0.22 and now with 2.0.24 and I got the same error. When I try to connect to my file server using a user from a trusted domain (DOMAIN2) my winbindd dies: [2007/02/12 15:14:26, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(328) [ 0]: getpwnam domain2+asspw [2007/02/12 15:14:26, 3] libsmb/namequery.c:resolve_lmhosts(962) resolve_lmhosts: Attempting lmhosts

I recently upgraded my PDC's and BDC's to 3.0.14a but my member servers are still running 3.0.10. Today users complained that the couldn't logon to the member server. When I try to run a wbinfo -u I get: Error looking up domain users Here's the log.windbindd: 2005/05/31 11:06:26, 4] param/loadparm.c:lp_load(3933) pm_process() returned Yes [2005/05/31 11:06:26, 3]

Hi there I'm having trouble getting winbindd working properly (I think). My understanding is that winbindd uses a kerberos 5 session (with 2003 server) to authenticate the machine to ADS, before any users have logged in. Then it uses that session ticket to authenticate all users of the smb server. Is that correct ? I can run kinit ok, and klist shows me a krb5 ticket (using a Domain

I'm setting up Samba in an environment with 2 Active Directory domains setup with a one way trust (DOMAINA -> DOMAINB). Samba is in DOMAINA. From looking at the logs (see below) it appears that winbind is having troubles getting the credentials for the domain controller in DOMAINB. I can get tickets, using kinit, for accounts in both domains. I can join DOMAINA just fine. Running

Hi. I'm using samba-3.0.24 on a gentoo box. The samba machine is configured as a domain member server within a MS Windows 2003 active directory. It has been successfully joined to the domain and everything works, shares, kerberos, ldap. However, I cannot get nested groups to work, or more precisely, I cannot add a local group using net rpc. Here is what I am doing: gentoo ~ # net rpc

Hi all, first of all is it possible to join a Linux machine to AD using a windows user account that is not a member of the group Domain Admins? Cause when I do this I get the following error while executing `net ads join -d 3 -U syncuser`: #net ads join -d 3 -U syncuser [2007/12/11 13:47:12, 3] param/loadparm.c:lp_load(4953) lp_load: refreshing parameters [2007/12/11 13:47:12, 3]

Hello, I've been able to get Samba up and running, it joins the ADS domain fine. It appears in the network browser on our Windows machines but when anyone attempts to access a restricted share it fails to authenticate them. I say restricted because if anyone accesses an open to everyone share it works. I'm trying to get the entire thing setup so that the Samba server is just a

Dear samba team: I've some troubles to join a GNU/Linux Debian ?squeeze? machine to a Windows 2000 ADS realm. I've studied everything about samba, but this problem cause that I cant print in the Windows servers and I've other problems. I've joined machines in this domain before ( I made a recipe at http://wiki.debian.org/SAMBAclienteWindows) But in the last days, I've a