similar to: help with Samba v. 3.0.21b authentication

Hi, I have Samba 3.0.21b running on Solaris 10 with ADS authentication. I get the following in log.winbindd when I do "getent passwd" but wbinfo -u lists all the users. Does anyone know why and how to fix it? Thanks, Vahid. [2006/02/04 13:37:02, 3] nsswitch/winbindd_ads.c:query_user_list(234) ads query_user_list gave 9926 entries [2006/02/04 13:37:04, 3]

Hi I have a problem with an interdomain trust where on the PDC for DomainA, everything works perfectly. getent returns local and DomainB usernames. On the PDC for DomainB, it's DomainB works fine, but getent only returns local usernames and groups, it doesn't return the usernames or groups for DomainA. wbinfo -u and wbinfo -g work fine and return all DomainA's usernames and groups.

Hi, I have an odd problem with winbind. I use it for, among other thing, nsswitch user resolution. I believe it have a problem with accessing information for a single user, or with caching. When I request info for a specific user, it fail (trying to login also fail with NT_STATUS_NO_SUCH_USER). But it work when I request info for all users. And then, login and getent for single account start

Hello, I have two domains: - a domain FRANCE on a SAMBA PDC called "SARGE" - a domain DOMAINTEST on a Active Directory called "SRV2003-2" I followed the samba howto chapter on setting a domain trust relationship between this two domains. For now, I just want DOMAINTEST users to log on shares of the FRANCE domain. On Windows 2003 side, with the MMC I can check/revalidate

I'm exeperiencing a strange ntlm_auth problem: I'm running two domain with a trust; the trusting one, (EUFEMIA with the PDC Beatrice) uses the WINS facility of the trusted one (LETTERE, PDC Alice). Users of EUFEMIA and LETTERE alike have a successful logon to Beatrice. LETTERE users do authenticate in Beatrice with ntlm_auth. EUFEMIA users do not: beatrice:/home# ntlm_auth --username

Hi I have the following question: Joining Win200x as ADS/DOMAIN, I see no problems for windows users to get authenticated even if they don't have local accounts. However, with the same samba (3.06) joining NT4 SP6 domain I see that only users that also have entry in /etc/passwd are been authenticated. I followed winbindd traces and saw that there is no problem communicating with

As of RC3 and RC4, I've noticed that winbindd's wb_getpwuid function is using the form <FQDN-domain><winbind-seperator><username>, and before, it was simply <NetBIOS-domain><winbind-seperator><username>. The net effect of what I'm seeing is that users which have a UNIX account locally on the samba box and also a domain account are being

Dear samba list, For some time we've had servers connecting to a w2k3 r2 server via ADS setup. Wins was working fine and users were able to authenticate. Recently we've added a GFS like system. This required getting the UID/GID's unified. Suggestions were made on the samba IRC channel to install SFU on the PDC. I'm receiving some very strange output. Usernames/pwd have

I want to limit access to shares via windows groups but when I set a share to anything other than 'valid users = %S' or 'valid users =', I cannot access the share. The error message indicates that the share is not accessible and I may not have sufficient permissions. If I change just the valid users in smb.conf and restart smb, I get right in without prompting. I also found that I

Ive got a problem with pam_winbind not authenticating, were using an AD 2003 domain. wbinfo works with correct password # wbinfo -a=AD03+richard.batty%password plaintext password authentication succeeded challenge/response password authentication succeeded with wrong password # wbinfo -a=AD03+richard.batty%password1 plaintext password authentication failed error code was

Was: RE: [Samba] samba 3.0 and freebsd 5.1 Hi Aaron, I deinstalled the 3.0.1 port and got the source tarball for 3.0.2a and installed from there. I also swapped out 3.0.1 for 3.0.2 on the domain controller when I discovered the second problem. I can now use smbclient to log into a file share on the member server, giving an " smb: \> " prompt but doing ls gives an error of:

I've got weird things happening with winbind authentication - sometimes it works, sometimes it doesn't. Sometimes it works for one username, and not for the other, sometimes it works for both, sometimes neither... I'm a departmental admin trying to authenticate against our central windows domain - so I've no control of the windows side. The client machine is a fresh redhat

Hello list users, I have been struggling with this combination in the subject field couple of days now, so I decided to ask for some advice here. Hopefully someone can point me to a right direction. The ultimate goal for me is to authenticate users using AD, so that the UID/GID values configured for users with SFU would also be in use in all our Linux machines. My understanding is that using

Hi, we've had a machine happily authenticating to an ADS domain for about a year now, and it's recently stopped working (possibly due to changes in the domain or a samba upgrade, unfortunately I'm not sure). We're using an ldap idmap backend running on the local machine. Now though, new domain users can't log in. Running "wbinfo -i newuser" returns an error.

Ive recently installed three servers with RHEL5u5. After some messing on the original, I got samba working with ADS authentication. I then went and got it working so that users could log in using their domain name & password to the box. I got this working with both no restriction, and ADS group restriction. I have left it on no restriction wheil I get these systems up and running. I then

I have a Samba server, its joinning on AD2008, the commands bellow has sucess when I test: # net ads testjoin Join is OK # wbinfo -t checking the trust secret via RPC calls succeeded # wbinfo -u # wbinfo -g # net ads user # net ads group # net ads user info administrator # wbinfo -u # wbinfo -g However, I need to open your share on the Windows Client(WinXP), but it doesn't work, stay asking

Hello all, I am having an issue that I need help with and have been searching the web high and low for a solution. It involvs using winbind to authenticate Linux systems against a 2003 Active Directiry domain with a one-way trust. Here is the lay out. Domain "ABC" is the resource domain where the servers are located. Domain "XYZ" is the domain that the primary user accounts

Hi, I have winbind joined to a Win2003 AD domain with rid idmap backend. Almost everything's working. wbinfo -u and -g work fine, as does getent passwd and getent group. I can also getent by ID number. The only thing I can't do is getent by name, which is preventing logins: root@services2:/etc/pam.d# net ads testjoin Join is OK root@services2:/etc/pam.d# getent passwd | grep david.croft

Hi! I have the following problem: winbindd getgrnam/getpwnam/lookupname calls do not return for a long time (> 30 seconds) which is obviously quite annoying to the users. This usually happens at the "first" login, i.e. subsequent connections are not delayed until a (probably cache) timeout. I've failed to determine who is responsible for the caching yet. I'll provide

CentOS 3.5 samba3-3.0.20a-24 Security ADS I can't get windows group permissions on shares to work except for 'domain users'. The windows group I am trying to use is Unix.Samba. This group does not exist on the linux box. It resolves correctly using getent group and when I chgrp files to unix.samba, ls shows the group ownership as Unix.Samba. getent group shows this group with the