similar to: winbind auth against ads not working via remote login - solaris 10.

Update: Success!!!! The corrective action was to move the below pam.conf settings to the top of each section. auth sufficient /usr/lib/security/pam_winbind.so try_first_pass account sufficient /usr/lib/security/pam_winbind.so try_first_pass session sufficient /usr/lib/security/pam_winbind.so try_first_pass -----Original Message----- From: Garrett, Joseph Sent: Thursday,

Dear list, I'm trying to get a Thumper (Sun Fire X4500) to play nice with AD so that we can offer a nearline storage service. Since many of our users will have multiple group memberships, it's imperative that samba be able to recurse through the groups that a user is a member of to determine if they have access to a resource. What happens instead is that every user who authenticates is

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Joining a mixed 2000 domain worked correctly for Samba 3.0.2a. After upgrading to either samba 3.0.9 or 3.0.10, the net ads join command completes successfully, and wbinfo -u returns a list of users, but any attempt to actually authenticate those users fails with NT_STATUS_PIPE_NOT_AVAILABLE. wbinfo -t also does not work, and produces the log file

I've been checking the authentication with "wbinfo -a <username>%<password>", which is failing with the following error: plaintext password authentication failed error code was NT_STATUS_NO_SUCH_USER (0xc0000064) error messsage was: No such user Could not authenticate user <username>%<password> with plaintext password challenge/response password

Hi I'm using winbbind with an AD Server. The wbinfo -u is not working but wbinfo -t is ok. Let me show you what's happenin and my logs: root@p10s-infra01:/# wbinfo -t checking the trust secret via RPC calls succeeded root@p10s-infra01:/# wbinfo -u Error looking up domain users My log debug level 10 from the wbinfo -u is: accepted socket 16 client_read: read 1824 bytes. Need 0 more

My experience is very limited on Unix and Samba. Please forgive me if the answer is right in front of me. Problems accessing shares on my Samba 3.0.1pre1 running on Gentoo1.4 I'm stuck big time! I've been trying to figure out why I cannot access shares. The only share I can currently read & write to is: [OpenShare] comment = Temporary file space path = /tmp

I have two boxes on which I am trying to get idmap_ad (from xad_oss_plugins) to provide uid/gid mapping, and am getting the error: "Could not convert sid <sid of some_user> to uid" The story so far goes like this: Without the line "idmap backend = ad:ldap://<PDC's FQDN>/" in smb.conf, I can successfully do all of: #> wbinfo -S $(wbinfo -n some_user | awk

Dear list, Do any of you use the latest(3.0.4) as a Samba PDC(with OpenLDAP) on Linux ? If yes, have you encountered the following problem ? The setup is a PDC with an LDAP server running locally which is accessed directly and through nsswitch/PAM. A member server is providing shares to clients. When looking up domain users (wbinfo -u) from a member server(Solaris 8, OpenLDAP 2.1.25) there are

Greetings all. I am banging my head about this one, I will try to be as specific as possible, bear with me please. I have a W2KDC ADC, and trying to join a Samba 3 linux workstation to it. What works: net join: succeeded wbinfo -t: checking the trust secret via RPC calls succeeded wbinfo -m: return to prompt, no output wbinfo -u: correct list of local + AD members

Hello, I'm using samba 3.0.0. Win2k clients on my network can access their fileshares without entering their username/password as long as their username and password exist in smbpasswd on the Samba server. Now I'm trying to have that information grabbed from ADS so that their passwords are kept synchronized but am having problems with winbindd. winbindd is running but I get nothing

Greetings, I'm new to Samba and I'm wondering where I went wrong.... My setup: Two FreeBSD 5.1 machines Samba 3.0.1r2 from ports collection One tdbsam domain controller and one member server - domcon and memsrv My problem: I've been working on this for a few days and still scratching my head. I can view the base directory of the member server (only as root). But when I try to

(samba 3.0.2a via RPM, ADS, SuSE 9) Every day Windbind stops responding, although the process is active. When this happens, getent passwd returns just local users, and wbinfo -u returns "Error looking up domain users" If i 'reload' winbind, nothing changes, but if I 'restart' it, it works again, for another day. Any ideas? log.winbind, after a wbinfo -u, follows:

Hi all, I have a Samba configuration that was in place on Ubuntu Warty (samba 3.0.7) workstations to allow winbind to authenticate domain users on them. These computers have since been re-installed with Ubuntu Hoary (samba 3.0.10) with the same configuration. The workstations have been successfully joined to the domain using `net rpc join`. `wbinfo -t` shows that the trust between the

Hi, I have got two production facilities having the same configuration, facility 1-(domain CSW)Samba 3.0.5 PDC running on redhat 9 and 4 member server running the same samba version on redhat 9, facility-2- (domain CSWN)Samba 3.0.5 PDC with 2 domain member server, the domain member server uses winbind to authenticate usersthey connect to the local PDC, I have configured two way trust between the

We have a problem with our setup that exposed another problem in winbindd. Setup: Samba 3.0.1, openLDAP 1.2.23 for idmap backend using port 1389, security=ads (w2k). All works after we get the daemons started successfully. The first issue has to do with the initial setup of both a Samba server [smbd, nmbd, winbindd, slapd], and a Samba client [just nmbd and winbindd]. We do the

I'm trying to learn about the interactions between SAMBA and Win2k DCs.??The eventual goal is to have a Win2k server with ADS working with a FreeBSD SAMBA server.??I've?used?the?setup?from http://oslabs.mikro-net.com/fbsd_samba.html and many other articles as the basis for what I've done so far. Winbind seems to work and I can show users and gropus using wbinfo although I see some

We have a Samba PDC (Mandrake 9) a BDC (RH 7.3) and a Memberserver (Solaris 2.8). A configuration which is working OK in 3.0.1 seems to be broken in 3.0.3. Everything (except NTLM authentication) has been working fine. After installing 3.0.3 you cannot list domain users and the member server doesn't recoginize users as domain members. wbinfo gives the following results On PDC, BDC and

hello, please help me, I'm nearly going crazy :(( I tried to authenticate postfix (smtp-auth) via pam_smbpass.so. This doesn't work, it works with ssh and imap, but not with postfix, darn (pam_unix is working with postfix) Then I tried pam_winbind.so, which somebody has told me to use it instead of pam_smbpass.so. But this is not working in any way I am trying :( The PDC server

Hi, i've some problems with winbind in Samba 3.0 Beta1. The configuration: Samba 3.0 Beta1 installed under Sles8 on IBM z800 (s390) compiled with gcc 3.2 and installed pam-devel-0.76-32 configure options: ./configure --with-pam --with-winbind --with-acl-support --with-tdbsam --with-libsmbclient --with-smbwrapper --with-utmp --with-quotas NT PDC with SP6a NT workstation with SP6a i try

Greetings, I currently have Samba 3.0.14a built using gcc 3.2.2 on a Solaris 9/Sparc box. This Samba server is a member server of our Active Directory (AD) domain called "CSUNET". When logged unto a windows client machine as an AD user I can see and access resources on the Solaris server. I've been trying to get PAM working to pam_windbind.so and correctly configured. So