similar to: pam_winbind says I need new password

Hello All, Im using a fresh install of CentOS 4.3 fully updated with the latest Samba packages from SerNet.de http://enterprisesamba.org/index.php?id=64 While I have used Samba/Winbind for quite some time, Im have a peculiar problem with these RPM's. When I try to "net ads join -U

hi, i just do some tests with a fresh compiled samba 3.0.23a. trying to authenticate against PAM with pam_winbind gives: Aug 1 09:59:21 humevo36 pam_winbind[27853]: pam_winbind: pam_sm_authenticate (flags: 0x0000) Aug 1 09:59:23 humevo36 pam_winbind[27853]: Verify user `gasch' Aug 1 09:59:23 humevo36 pam_winbind[27853]: enabling cached login flag Aug 1 09:59:23 humevo36

Hello Marc, > What schema version does your AD have? > http://www.itguydiaries.net/2012/09/how-to-find-current-active- > directory.html > > Samba is shipped with AD schema 47 (MS Windows Server 2008 R2). Maybe > you already run a newer schema version or had done schema enhancements, > that are currently not supported by Samba. AD scheme version is 47. However, a few years

Hi, I just upgraded from Mandriva 2009.0 (Samba 3.2.3) to Mandriva 2009.1 (Samba 3.3.2), keeping all the same config files I had before. I use pam_winbind to authenticate users against MS Active Directory. Everything was working perfectly prior to the upgrade, and now everything seems to be fine except for one thing: no user can have access due to the following errors (taken from auth.log): May

Sorry for the repost, but I've not gotten any response and the problem persists. Does anyone have any idea how to fix? =================================== I read a few posts in the archives about this problem and that it was to be fixed in 3.0.23c. Currently I'm running 3.0.23d-2+b1 on a debian system and am getting the following: $ ssh -l testuser fileserver Password: Your password

I read a few posts in the archives about this problem and that it was to be fixed in 3.0.23c. Currently I'm running 3.0.23d-2+b1 on a debian system and am getting the following: $ ssh -l testuser fileserver Password: Your password has expired Here's what auth.log shows: Jan 4 11:46:26 tmcsamba1 pam_winbind[14309]: user 'DOMAIN1+testuser' OK Jan 4 11:46:26 tmcsamba1

Hi, I installed and configured Samba 3.0.23c as a domain member. I am running winbindd on Solaris 8 Sparc. I am seeing a strange behavior after the configuration. If I issue a "wbinfo -g" I see all the NT groups. Likewise, if I issue a "wbinfo -u" I see all the NT users. Continuing on with a "getent passwd" shows me the combined Unix and NT accounts, but

Dear all, I have joined samba 4.1.18 (FreeBSD 9.1) to an Active Directory domain as an active directory domain controller. The domain has two other Windows Server 2008 R2 DCs. Both windows and samba complain about replication problems. Windows reports that replication from Windows DCs to Samba completes successfully, but replication from Samba to Windows fails with error "The replication

Dear Samba friends, Last weekend I decided to upgrade the samba server. We were running Samba 3.3 something and FreeBSD portupgrade was complaining that this version should be removed and assumingly replaced by the newest version. I removed the package via portupgrade and installed the 3.5.6 version. The upgrade went quite smoothly in general, but I encountered some difficulties with the printer

Dear Samba friends, Last weekend I decided to upgrade the samba server. We were running Samba 3.3 something and FreeBSD portupgrade was complaining that this version should be removed and assumingly replaced by the newest version. I removed the package via portupgrade and installed the 3.5.6 version. The upgrade went quite smoothly in general, but I encountered some difficulties with the printer

Hello, i hope u guys can help me. This is the first time I write to the list. Sorry about my english... i got a solaris 10 machine and installed "samba 3.0.2.3c" with "openldap 2.3.2.1" , "openssl 0.9.8" and "gcc 3.4.6". i configured kerberos and all the other things. all good. i added the samba-server (solaris10) to a active directory domain. with

Hello all, I have successfully setup winbind with clients pointing to a central ldap server, and have had great results for ssh service logins, however i get wierd problems with gdm login attempts after winbind has been running for a while. Oct 10 14:45:26 ctilinux6 pam_winbind[2398]: request failed, but PAM error 0! Oct 10 14:45:26 ctilinux6 pam_winbind[2398]: internal module error (retval = 3,

Hello, I'm having problems with group consistencies between my samba server and a trusted domain. I'm running 3.0.23b with my samba server a member of an NT domain, which in turn trusts another domain (AD mixed mode). The AD admin added a user into a group, but my samba server sees the user as being added to a different group. Any ideas? Regards, Franz

Hi there Just a couple of questions to help me understand. When I upgrade from 3.0.22 to 3.0.23c the access restrictions on my shares on the member server no longer work. I read in the Changes file "Since Samba 3.0.8, it has been recommended that all domain accounts listed in smb.conf on a member server be fully qualified with the...." So far so good I know what I have to do still I

Hello, In the documentation it's writen (https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO) We do not recommend using the Domain Controller as a file Server What are the best practice in a environement with only 10 pc If you have just one physical computer (vm,lxc,..) Thanks -- probeSys - spécialiste GNU/Linux site web : http://www.probesys.com

All, The SAMBA version 3.0.21b expired password pam_winbind.so section perhaps might still have an issue. It seems to just be in some kind of loop and never completes the section in pam_winbind.c of pam_sm_chauthtok. See ssh (Solaris 4.2.p1 ssh) sequence below: ssh hermione Password: Changing password for leeraym (current) NT password: Re-enter new Password: Password: Password:

We've discovered that although Winbind supports password changes when the account password is expired, this only works with *interactive* shells. This is a major problem for us. Use case 1: SSH tunnels: $ ssh user2@localhost -N -L 4711:localhost:22 user2@localhost's password: <trying to use the tunnel> channel 2: open failed: administratively prohibited: open failed As you can

Hello, Using samba 3.0.23c on Debian 3.1 (package version 3.0.23c-1~bpo.1 from sarge-backports) or version 3.0.14a (package version 3.0.14a-3sarge2 from sarge), I experience the following problem on a file server on a Windows 2003 domain with Active Directory. Some test user can access group shares of groups he is not in, or cannot access group shares of groups he is in. The output of the

Hi all, I am having a problem with pam_winbind.so. Is there any documentation that tells exactly what each module with pam_winbind.so does? In other words, what does the auth section do, what does the account section do??? When I try to authenticate, the auth section in login pam seems to pass successfully, but the account section seems to fail. Here is my login module auth required

I've got a client - a cheap client - and they want to add a new file server (samba sharing) to their network. They have one samba server already acting as the domain controller (PDC) and file server (and DHCP server). The wiring is a nightmare, and everything is daisy chained through 3 different non- programmable switches. They have no more open ports on any of the switches. Further, the