similar to: wbinfo_group.pl / wbinfo -r not working!

Hello to all. I?m using squid + samba to authenticate my users with active directory. The error occour only in the first time i authenticate an user. All works fine, but i have this is my logs: ==> /var/log/samba/log.winbindd <== [2008/05/21 00:32:36, 2] nsswitch/winbindd_util.c:add_trusted_domain(171) Added domain BUILTIN S-1-5-32 [2008/05/21 00:32:37, 2]

I have an application setup as follows: Core code is in: /home/subdomain1/current accessed at subdomain1.domain.com I then have various instances of this app that are sym-linked to the core (minus a custom config file and views) setup like: /home/subdomain2/current accessed at subdomain2.domain.com I have backgrounDRb running to update a cache of RSS files. Is there a way to get all

A problem On the integrate Samba and AD 2k3 .. the page is my reference http://www.infosecwriters.com/text_resources/pdf/AD_and_Linux_TMunn.pdf i wnat to use users group for squid' wbinfo_group.pl use auth... now i can join the samba server to AD domain but i can't read user's group.. can any one tell me what is happend.. like this [root@wxyz-dns1 samba]# wbinfo -u

Hello, I'm having trouble when I try do get a group SID from my domain, the user lookup and authentication is working fine. Actually what I'm trying to do is to authenticate squid against MS AD using winbind. I need to restrict access by group, so I'm using wbinfo_group.pl to do it. The machine has been built to be a proxy server only. I'm using Suse Linux 9.3 Professional

Hi All, I'm having issues getting Samba/Winbind to work with a domain that is lowercase. I have read on some sites that it won't work, is this the case? system is Debian lenny, samba 3.2.5-4. Windows server is 2003 running AD in 2000 native mode. I've done everything I would normally do that my running samba/ad authing servers do, and wbinfo -u + wbinfo -g work fine, as do the

Hi All, I have the following problem: [2002/05/29 18:16:13, 0] smbd/posix_acls.c:create_canon_ace_lists(774) create_canon_ace_lists: unable to map SID S-1-5-21-2025429265-1580818891-682003330-1109 to uid or gid. in smb.conf I have: [global] winbind uid = 1000-2000 winbind gid = 1000-2000 winbind enum users = yes winbind enum groups = yes Any Idea?? Thanks, Christian DISCLAIMER: This

Okay, I'm having some weird Windbind issues. Here's my plea below: Okay, here's my setup: SLES9 | Samba Version 3.0.4 | Winbind | W2K3-SP1 Active Directory Domain I have kerberos configured properly, I can successfully run this command: # knit domainuser domainuser@TESTDOMAIN.ORG's Password: kinit: NOTICE: ticket renewable lifetime is 1 week and succesfully joined the

Hello everybody, I need to setup a Domain/subdomain environment with Windows AD. All the DCs run Windows Server 2012 R2. All domains (root and subdomains) The forest and domain functional level are set to Windows 2008 R2. I want to use Samba 4 server as fileservers in these domains, but up to now I have trouble adding Samba 4 member servers to Windows AD. My test environment is made of 2

The problem is that getenv does not return any AD domain users or groups. From much research this seems to be because nsswitch is not setup for Samba. I would really appreciate some assistance as I think this is my last hurdle for actually being able to use this test file server. Ubuntu server 18.04 - Samba installed and configured (almost) Kerberos functioning. wbinfo --ping-dc successfully

After the join is attempted I am returned the following Could not initialise lsa pipe error looking up rid for user user$: NT_STATUS_NONE_MAPPED Unable to join domain xxxx. Running on freebsd 9.0 with samba-3.4.17 I haven't seen much in the logs. Everything was working fine before a reboot LEGAL NOTICE This email and any files transmitted with it are confidential and intended solely for

Hi All, i was trying to configure proxy server, which will authenticate only for the users in group called "internet" that's in my Windows2003 ADS previously i configured my proxy server for all users in my domain and it was working well i think, i have some problem using external_acl_typel Please Help Following is my present squid configuration squid-2.5.STABLE6-3.4E.11

# wbinfo -Y S-1-5-11 Could not convert sid S-1-5-11 to gid # wbinfo -Y S-1-5-13 Could not convert sid S-1-5-13 to gid (S-1-5-11 are the Authenticated Users, S-1-5-13 are the Terminal Server Users.) This bug was finally solved in release 3.023d. Now it is back again. How can I get this working? I'm using idmap/tdb - would another idmap-module solve this issue? The winbind log looks like

Please help. I've been searching for days, trying nearly everything I can find that seems relevant, but I can't get this working. I am able to create users, login to Windows systems joined to the SAMBA domain as those users, but filesystem ACLs on Windows Domain Member Servers do not work which I suspect is due to my IDMAP OU is empty. wbinfo -u returns "Error looking up domain

I can get authentication to work on linux 7.1 with samba 3.0alpha15 if I make valid users = @"INS+Domain Users", but if I try to set valid users to just a single user: valid users = INS+DavidSha, it fails to give me access. I see the following in log.winbindd. It looks like it is looking for a domain called DavidSha?!? My winbindd separator is +. Can somebody please respond to this.

I'm trying to use autofs with Active Directory. This works: autofs_ldap_auth.conf: <autofs_ldap_sasl_conf usetls="yes" tlsrequired="yes" authrequired="yes" clientprinc="nfs/myhost at MYDOMAIN" /> /etc/sysconfig/autofs: LDAP_URI="ldap://domaincontroller1 ldap://domaincontroller2" This also works if I replace the auth

Hi All, I am running Samba3.0 beta 3 installed from RPM's provided on the Samba.org FTP server. My platform is Red Hat 9. I am seeing a lot of errors such as: Aug 6 17:50:18 server3 winbindd[31138]: [2003/08/06 17:50:18, 0] nsswitch/winbindd_sid.c:winbindd_lookupname(103) Aug 6 17:50:18 server3 winbindd[31138]: could not find domain entry for domain AND smbd[27004]: [2003/08/06

Sometimes a group sid does not get resolved to its name. Is this a settings problem? Looks like winbind deamon went dormant for a while and then woke up? I am using interface wbcLookupSid provided by the library libwbclient.so for resolving sids to names. These are the winbind related parameters in /etc/samba/smb.conf [global] # separate domain and username with '\', like

Hello Samba folks, I have recently begun seeing some disturbing behavior from winbind. Winbind will fail to look up users and groups. Examples: The machine is configured to use winbind as a nss module. "getent passwd <username>" will yield no results. "wbinfo -n <username>" will yield "Could not lookup name <username>" "wbinfo -g"

Hi, I'm using samba 3.0.23c, and having a bit of trouble getting it to play nice with my active directory. I'm using Windows Small Business Server 2003 with the SFU 3.5 NIS server/schema extensions installed. I have samba configured to use ad as the idmap backend, and sfu for nss info. When running getent passwd, only a few active directory users show up, and I get lots of errors

Hi there, I have just discovered that my winbind installation (3.0 alpha 24 w/ACLs, RH 8.0, connected to a Windows 2000 ADS domain) seems to be no longer mapping groups correctly. Executing the "groups" command for any particular domain user fails, complaining that it can't get the group name for various winbind-ranged gids. Doing an ls of a directory created from Windows via samba