similar to: winbind: group name doesn't map to a SID, but gid does

There is an instance of Ms.Active Directory that has had the 'Services For Unix' applied. I use winbind v3.0.24 to get user/group info from that Ms.Active directory instance like so: -------- begin smb.conf snippet: ------------ security = ADS realm = mydomain.com workgroup = MYDOMAIN winbind enum groups = yes winbind enum users = yes winbind nested groups = yes winbind nss info = sfu

Hi Jonathan, Yep, samba sends the domain name as well as the username to the domain controller, and what I think happens is the NT controller sees that the domainname passed is NOT his domain, checks his list of trusted domains, doesn't find it, and says sayonara buddy... I am assuming that 'SATURN' is the netbios name of the win2k client machine? I'm not real clear on how this

with samba 3.0.22, I'm trying to integrate a linux box with Microsoft AD by using winbind for authentication as well as for the source of nss info. When winbind is configured to use its own local id maps, everything works fine. But when i configure winbind to use 'ad' as the source of nss info, authentication fails, 'getent' commands return no results, and 'wbinfo -r

Hello, I followed the steps at http://www.enterprisenetworkingplanet.com/netos/article.php/3487081 for adding a v3.0.21a samba and winbindd server to a MsAD domain and configuring nsswitch.conf to find passwd and group info from winbind. This seems to have worked out fine, except that I can't 'see' or 'recognize' certain groups via getent or via wbinfo -g. E.g. I can see the

I am new to linux based version control systems and am setting up a new project in Rails which will use SubVersion. I set up a repository for this project in a directory called /var/spool/svn and ran svnadmin create etc. I did all this while su'ed to root, however all programming will be done by non-privileged users. To provide for this I created a group called "svn", added

Hi, I have a redhat 6.5 with samba 3.6.9 and a working AD integration. I used the redhat guide to create a share, but it's only working partly. Ie the second group of valid users I add after the comma doesn't have access to the share. You get a popup like access DENIED. /var/log/samba/log.accessmachine shows the same error NT_ACCESS_DENIED. I think it's due to the fact that

I am currently using Mssfu, nss_ldap, and pam_ldap to enable my linux boxes to auth against MsA.D. and get all their user info from MsA.D. I recently discovered that winbind can accomplish the same without Mssfu, as long as I'm content to be limitted by the winbind config directives 'template shell' and 'template homedir'. I'd like to drop sfu if I can. The 'template

Now I'm trying to make it so the Samba accounts can be used for user logins as well. Unfortunately I'm having a bit of trouble with winbind. Whenever I try to do a "getent passwd eknuds", it find the entry in the ldap sam, but the winbind log for my domain comes up with this and the getent displays nothing: [2007/03/07 15:48:46, 2] passdb/pdb_ldap.c:init_sam_from_ldap(541)

Hallo , when I try to change user password on samba server i become this error : error connecting to 127.0.0.1:139 (Verbindungsaufbau abgelehnt) unable to connect to SMB server on machine 127.0.0.1. Error was : code 0. Failed to change password for bukhari if any someone I have an Idea please send me an E-Mail to "ufz6@rz.uni-karlsruhe.de" Thanks to All Amir Bukhari

We currently setup page table walks etc as outer-shareable. Given we don''t really make the distinction between inner- and outer-shareable yet err on theside of safety. Signed-off-by: Ian Campbell <ian.campbell@citrix.com> Cc: Stefano Stabellini <Stefano.Stabellini@eu.citrix.com> Cc: Tim Deegan <tim@xen.org> --- xen/include/asm-arm/flushtlb.h | 4 ++-- 1 files

There is a bug introduced in autofs which breaks maps which are not stored in /etc. There is a patch but no official update yet. A patched version of autofs is available here: http://www.chrysocome.net/downloads/autofs-4.1.3-187.c4.1.i386.rpm See also https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=201084 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=202860 John. -- John

wbinfo can turn names into sids, sids into names, and sids into uids. However, getent passwd only finds users in the local /etc/passwd file. Same for getent group. /etc/nsswitch.conf says this: passwd: files winbind group: files winbind shadow: compat I strace'd the getent command. It said it couldn't find /lib/libnss_winbind.so.2, so I made that a symlink to

wbinfo can turn names into sids, sids into names, and sids into uids. However, getent passwd only finds users in the local /etc/passwd file. Same for getent group. /etc/nsswitch.conf says this: passwd: files winbind group: files winbind shadow: compat I strace'd the getent command. It said it couldn't find /lib/libnss_winbind.so.2, so I made that a symlink to

Hello, I've got a linux box running smbd & nmbd versions 2.0.6 with security = DOMAIN, and an NT4 box as the password server. The sole domain controlled by that NT4 box is named "MSOE". All is well with win98 clients. However, Win2k clients that are not part of an NT domain, but simply belong to a "workgroup" named "MSOE", are unable to authenticate. The

this problem might be more to do with apache than winbind, but I'll start here anyway... Problem: can't get apache httpauth to work with nested groups, though ssh auth (also using pam) to same box does Config: -------------------------------------------------------- software: apache 2.0.55, libapache2-mod-auth-pam 1.1.1, and winbind 3.0.22 pertinent apache config:

I have winbind v3.0.26a running on ubuntu server v7.10 (gutsy). I intend to get user & group info from MsActiveDirectory. However, when I type: getent passwd somerandomuser I get the uid and gid for the user, as recorded in the msad schema by virtue of sfu, but the homedir and loginshell that are returned are like what "winbind nss info = template" would return by default:

When winbind is configured without the 'winbind nss info =' statement (i.e. such that winbind maintains its own local map of SIDs -> UID/GIDs), the following works fine: # cd ~detertj # getent passwd detertj detertj:x:10008:10000:detertj:/home/MSOE/detertj:/bin/bash but when i try to make winbind use sfu for the mapping of SID -> UID/GID, username lookups are

suggestion for minor improvement of the smb.conf manpage in the context of the 'idmap backend' parameter. At least as of v3.0.22 the manpage says: Finally, using the idmap_ad module, the UID and GID can directly be retrieved from an Active Directory LDAP Server that supports an RFC2307 compliant LDAP schema. idmap_ad supports "Services for Unix"

Please join us as Simon Twigger talks to us about "Writing software for biomedical research using Ruby and Rails" as always we will be meeting at Stark Investments Development Center 1000 North Water St. 11th Floor Milwaukee, WI 53202 see you at 5:30 pm :-) http://www.mkerb.org -- Tom. -- "Nothing will ever be attempted, if all possible objections must first be

The setting is Debian with winbind v3.0.22. The pertinent bit of winbind configuration is as follows: winbind nss info = sfu idmap backend = ad winbind enum groups = yes winbind cache time = 1800 The problem is that once in a while, typically when either: a) an ls command is given for the 1st time in a login shell session or