similar to: winbind passwords expiring

I posted this to comp.protocols.smb, but I'll give it a shot here too... Background : We have an existing Win2k domain, 2 Win2k domain controllers, all working just fine. I've been using Samba 2.2.x for quite a while to provide access to specific folders on *nix machines using Domain security...So I'm reasonably familiar with how file/print sharing works. But what I'm

All, I fear I''ve become a pita with this, but windbind periodically dying on one of my machines is really starting to cause grief, and I have no idea what might be causing it, especially as the same config is used on several similar boxes which do not exhibit the problem. While I've posted the problem previously, I thought that maybe this latest log entry after winbind dies

I have a Samba 3 server setup using LDAP for the backend. I keep getting a message that the passwords will expire. This happened about a month ago and I did not worry about it, because my XP machines kept telling me this last year, but they never expired. I figured it was something to do with XP and not my Samba server. This year though, with my new server, they did expire and I had to

I tried searching through the archives, but was unable to find anything about this. Everything regarding windbind and AD membership is working perfectly with one exception. Here's an example of what I'm experiencing: A group called "department_users" contains two groups "department_faculty" and "department_staff". These two groups,

I'm just curious how this works. I've set up an Active Directory Domain controller using Samba 4.0.0. I DO NOT have Winbind configured. When I run "ls -al /samba/share/directory" I notice that I have users named like 3000000 belonging to the group "users". Without windbind configured, how do I have users and groups inside of my Samba domain (for instance the

(samba 3.0.2a via RPM, ADS, SuSE 9) Every day Windbind stops responding, although the process is active. When this happens, getent passwd returns just local users, and wbinfo -u returns "Error looking up domain users" If i 'reload' winbind, nothing changes, but if I 'restart' it, it works again, for another day. Any ideas? log.winbind, after a wbinfo -u, follows:

In my setup I'm running Samba 3.0.23d-19.2 and CUPS 1.2.7-12.1. Printing from a windows-client works fine, until I instruct CUPS to add a banner-page. The banner-page then is the only thing that gets printed. Doing the same from Linux everything works fine. I get my job including a banner-page. The Windows-printjob is passed raw from Samba to CUPS... Anyone has an idea? Best, Johannes

> On 23 Feb 2019, at 09:33, Rowland Penny via samba <samba at lists.samba.org> wrote: > > If you have, as you have, 'files sss winbind' in the the passwd & group > line in nsswitch.conf, means this: > First /etc/passwd or /etc/group is searched and if the user or group is > found, this info is returned. > Next sssd will be asked, 'do you know this user

Okay, I'm having some weird Windbind issues. Here's my plea below: Okay, here's my setup: SLES9 | Samba Version 3.0.4 | Winbind | W2K3-SP1 Active Directory Domain I have kerberos configured properly, I can successfully run this command: # knit domainuser domainuser@TESTDOMAIN.ORG's Password: kinit: NOTICE: ticket renewable lifetime is 1 week and succesfully joined the

I have a problem with winbind resolving global groups on a trusted NT Domain. I want to use SQUID and NTLM Authentification and therefore the external authentification helper needs to check if a user belongs to a given group. When I do 'windbind -r DOMAIN+USER GROUP', only groups of the local domain are listed. It seems as if winbind couldn't find a domain controller for the trusted

Hi, i've read the thread about idmap customization, i'm planning an integration between windows AD and MIT kerberos, and i was very interested on the subject. Now we are authenticating windows AD user against mit kerberos realm with a cross-domain trust, and with windows client everythings works. Ie. Authentication is done with kerberos mit and authorization is done with windows AD.

My passwords have expired again in my LDAP/Samba setup. I have been reading in the Samba How-To and just want to make sure this is what I need to do before I try it. If I want to have my passwords expire in the year 2015, do I need to do the following to all of my users? pdbedit --pwd-must-change-time="2015-01-01" --time-format="%Y-%m-%d" username Using the ldap-usermod

Hi, I have a box running Mandrake 8.2 and samba 2.2.4 on an NT domain. smbpasswd -j says it joins the domain ok, I use the included sys-auth-windbind file for pam, and the winbind entries are in nsswitch.conf. Everything appears to be running, but when I try wbinfo -u I get "Error looking up domain users". getent passwd only return the linux accounts. Yet wbinfo -t returns

Hi! I?m using windbind to authenticate an NT domain users. It works well, however when an user logs, it can use upper o lowercase letters, and that is ok. But pam_mkhomedir creates diferent case sensitive home dirs each time, even if shell prompt shows the name the propper way. Has anyone dealed with this issue ?. What is the best solution?. Thanks in advance !

Hello all Sorry to post this hugely off-topic, but i have no clue where to start. We are looking to replace an Exchange server with something with less licencing issues, is there a way to use windbind (or winbind-ish behaviour) for an email server (ie users authenticate through winbind to log on to imap server etc). Once again, sorry for the mispost, even a push in the right direction will

I'm trying to use winbind for authentication. By all the usual indices ("wbinfo -t, -u" and "getent passwd") windbind itself is working. So I used system-config-authentication (the Redhat/Fedora GUI) to enable winbind. But my winbind users are not able to log in. When using system-config-authentication, shouldn't the /etc/pam.d/system-auth file show some changes to

Hi, I joined samba server (linux box centos 5.4) under samba 3.4.7 to Windows Domain at windows server 2003. wbinfo -g shows me all the groups from the AD and wbinfo -u shows me all the users. Then yesterday i upgraded to samba version 3.5.2, restarted windbind and smb. Then, when i make: wbinfo -g then i see nothing. wbinfo -u shows me all the user in Active Directory. In previous version

Hi I try to use windbind rule to authenticate users in dovecot login procedure. /etc/nsswitch.conf file: passwd: files winbind shadow: files winbind group: files winbind when I try logon from my console to dovecot (pop3 server): # telnet komp14 110 Trying 10.10.10.38... Connected to komp.xxx.xxx (10.10.10.38). Escape character is '^]'. +OK Dovecot ready. user tt1 +OK pass xxxxxxxxx -ERR

In order to support another project which I wanted to use winbind authentication for, I had to turn 'winbind use default domain' on. This seems to have disabled my ability to set group permissions on a share. My windbind separator is '-'. Before, I would give a group access to a share by putting '@DOMAIN-Group Name' in the list of valid users for the share. After setting

I need a CIFS server to provide access to Linux files to Windows clients. I am able to accomplish this on SLES12 SP5, running kernel-4.12.14, with samba 4.10.5 using the following smb.conf [global] dedicated keytab file = /etc/samba/samba.keytab domain master = No kerberos method = dedicated keytab load printers = No local master = No ntlm auth =