similar to: Interdomain Trust, wbinfo works on both servers, getent doesn't work on one server

Hello, I have two domains: - a domain FRANCE on a SAMBA PDC called "SARGE" - a domain DOMAINTEST on a Active Directory called "SRV2003-2" I followed the samba howto chapter on setting a domain trust relationship between this two domains. For now, I just want DOMAINTEST users to log on shares of the FRANCE domain. On Windows 2003 side, with the MMC I can check/revalidate

Hi, I have an odd problem with winbind. I use it for, among other thing, nsswitch user resolution. I believe it have a problem with accessing information for a single user, or with caching. When I request info for a specific user, it fail (trying to login also fail with NT_STATUS_NO_SUCH_USER). But it work when I request info for all users. And then, login and getent for single account start

I have been trying off and on for some time now to get an interdomain trust relationship going between two samba pdc machines (DomainA=trusted & DomainB=trusting). Both pdc's are running on Solaris boxes and NIS is involved (I doubt there is a NIS complication just because I can use accounts on DomainA on DomainB's samba, as long as I add them using smbpasswd manually). The situation

Hi list, I've just upgrade my current samba config to 3.0.23c on Suse 9.1. x86 I join my active directory 2003 domain and 'getent passwd' works fine but each time I run 'getent group' winbind crash I deleted the winbindd_cache.tdb but nothing better wbinfo -u / wbinfo -g works wbinfo -t tells "checking the trust secret via RPC calls succeeded" Can someone help me I

Hi Igor, Thanks so much for troubleshooting all this while and we found out none of our configuration is the problem but the source code. Hope that the samba team will modify to a working code so that I can deploy it. Actually my dateline to deploy is coming soon and I do not know what to do now..... when do you think the code will be modified and be released? Thanks so much for your help.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Joining a mixed 2000 domain worked correctly for Samba 3.0.2a. After upgrading to either samba 3.0.9 or 3.0.10, the net ads join command completes successfully, and wbinfo -u returns a list of users, but any attempt to actually authenticate those users fails with NT_STATUS_PIPE_NOT_AVAILABLE. wbinfo -t also does not work, and produces the log file

We are splitting our users into 2 domains(DOMAINA and DOMAINB (changed for security reason)). I am having problems getting users who log into their workstation on DOMAINA to access a samba share on DOMAINB. We are using W2K3 servers as our AD with LDAP. Samba shares on are CentOS5.1 servers. I Can anyone point me to some docs on how to set this up? I have been rumbling through google for the past

Hi, I have these following configurations: Active Directory 1 = DomainA.com AD1 Primary Group = Domain Users AD1 Group 1 = Linux (member: DomainB\ad2testuser1) Server joined = linux1.DomainA.com (configured Kerberos and Winbind Samba4 from sernet) Active Directory 2 = DomainB.com AD2 Primary Group = Domain Users (member: DomainB\ad2testuser1) AD2 User 1 = ad2testuser1 note: (1)

I'm setting up Samba in an environment with 2 Active Directory domains setup with a one way trust (DOMAINA -> DOMAINB). Samba is in DOMAINA. From looking at the logs (see below) it appears that winbind is having troubles getting the credentials for the domain controller in DOMAINB. I can get tickets, using kinit, for accounts in both domains. I can join DOMAINA just fine. Running

Hello, I have a Centos 4.4 Linux server that setup Winbind with windows 2003AD integration, the winbind suddenly can't receive AD accounts, I can use wbinfo -u to show AD user name and group etc, but getent passwd isn't pulling across all of the domain accounts. Here is the winbind log: [2007/10/04 23:31:08, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(50) error getting user id

Hello, I'm actually migrating resources from an old samba3/LDAP  (DOMAINA) to a Samba4 domain (DOMAINB) . I succeded in populating Samba4 users and groups from the old one. Now both domain live together during the migration i would like to set up an interdomain trust between the 2 domains so that samba4 users can still have access to samba shares on the old samba3 domain. So it would be

Ive got a problem with pam_winbind not authenticating, were using an AD 2003 domain. wbinfo works with correct password # wbinfo -a=AD03+richard.batty%password plaintext password authentication succeeded challenge/response password authentication succeeded with wrong password # wbinfo -a=AD03+richard.batty%password1 plaintext password authentication failed error code was

I'm exeperiencing a strange ntlm_auth problem: I'm running two domain with a trust; the trusting one, (EUFEMIA with the PDC Beatrice) uses the WINS facility of the trusted one (LETTERE, PDC Alice). Users of EUFEMIA and LETTERE alike have a successful logon to Beatrice. LETTERE users do authenticate in Beatrice with ntlm_auth. EUFEMIA users do not: beatrice:/home# ntlm_auth --username

I have two domains which are on different subnets, connected by a routed OpenVPN tunnel. The domains trust each other. Domain A has the WINS server. Domain B is confused to use Domain A's WINS server. The VPN pushes the WINS server as part of its DHCP options as well. >From either domain, I am able to use smbclient to see the shares on the other domain's PDC. I have to specify -W

Dear samba list, For some time we've had servers connecting to a w2k3 r2 server via ADS setup. Wins was working fine and users were able to authenticate. Recently we've added a GFS like system. This required getting the UID/GID's unified. Suggestions were made on the samba IRC channel to install SFU on the PDC. I'm receiving some very strange output. Usernames/pwd have

Hi I am having a lot of trouble getting users from a trusted domain to access shares and files. getent passwd / get group doesn't retrieve domain users or groups, so I can't set permissions for the users or groups from the trusted domain The domain having problems is: Ubuntu 6.06 Server Samba Version 3.0.22 The trusted domain is: Ubuntu 8.04 Server Samba Version 3.0.28a wbinfo -u and

Hello. I need the file server to authenticate users from two domains. Of DOMAINA that the file server has joined and users of DOMAINB that maintains a trust relationship with DOMAINA. I have two domain forests (DOMAINE and DOMAINB), and a trust relationship exists between both. DOMAINA servers are running with samba version 4.5 (with CentOS 7 system) the DOMAINB server is running with windows

I noticed that smbclient worked on some solaris 11 machines but not others. The issue a slightly different version of libarchive on the machine (0.12 vs 0.13), even though I thought all machines had been patched to the same level. So I decided to recompile. When recompiling samba 4.4.7 on solaris 11 I saw the following warning Checking for header krb5.h

> IMHO, for this to work you should define "idmap domains = DOMAINA > DOMAINB" and configure the idmap backend appropriately for both domains > using idmap config DOMAIN:backend/range/default etc... > > For more details see "man idmap_tdb, man idmap_ldap and man idmap_rid". > > --Sadique Hi Sadique, thanks for your response. I test it but I don't

Hello, I am running a samba/ldap PDC on domainA with winbind. It works fine as a domain controler. Samba : 3.0.21c OpenLDAP : 2.2.15 I want to add domainB as a trusted domain (ie the users of domainB would have access to the shares of domainA without another authentication). I configured this and net rpc give me this : # net rpc trustdom list Password: Trusted domains list: DomainB