similar to: wbinfo works fine, getent only works for builtin groups

Hi, today we found the reason for a problem with Group-Memberships when running Samba as an ADS Domain Member. 1. Short Summary of the Environment =================================== = "old" Systems: - donald: Microsoft Windows 2000 as ADS Controller with 2 (daisy, tick) Backup Controller - 800 Users mostly replicated from Microsoft Exchange - 65 Groups - fix: Samba 2.2.8 on

Hi I have a problem with an interdomain trust where on the PDC for DomainA, everything works perfectly. getent returns local and DomainB usernames. On the PDC for DomainB, it's DomainB works fine, but getent only returns local usernames and groups, it doesn't return the usernames or groups for DomainA. wbinfo -u and wbinfo -g work fine and return all DomainA's usernames and groups.

I started my AD-member server with the DC not being present. Afterwards, I executed the "good practice" sequence from the howtos for testing a installation: "testparm ..." "nmblookup -d ..." "nmblookup -M ..." "nmblookup __SAMBA__ ..." "smbclient -L ..." And some domain tests: "net ads testjoin" "net ads lookup"

Hello all. I'm relatively new to Samba, and haven't been able to track down a solution to this particular problem. I use Samba/Winbind to authenticate FreeBSD machines against a Windows 2003 Active Directory. That all works fine. The problem is that groups in the AD of type "Security Group - Domain Local" are causing winbindd a lot of grief. Every time the winbindd daemon is

I've been messing around with running samba 3.4.14 inside a freebsd jail over the last couple of days, and am running into an odd problem where wbinfo -u and wbinfo -g succeed, but getent passwd fails (insofar that it shows only local users, but none of the domain users). Here's my smb.conf: [global] interfaces =192.168.0.16/32 bind interfaces only =yes security

I have configured winbind on a Linux file server, connecting to a Samba PDC. When I run wbinfo -g, I can see the group "domain users". On the other hand, when I run getent group, I do not see this group. Apart from a few other groups, all groups are visibile in both wbinfo -g and getent group. When running for the first time wbinfo -u, getent passwd and wbinfo -g, I got the results

Hi, on a customer system samba/winbindd is used for windows and unix authentication. I just tuned searches of the ldap backend to speedup by factor 20-200 and slapd now doesn't seem to be the bottleneck anymore. Don't know how well the windows authentication now works, since this is presently done by the heartbeat failover server. However, simply starting 'mc' as root makes

Hi jo here again ( Mr. FINALLY ) I think indeed this also applies to me, if i do 'getent group' i get [root@client var]# tail -f log.winbindd [2003/08/05 11:48:14, 0] nsswitch/winbindd_group.c:winbindd_getgrent(640) could not lookup domain group Domain Admins [2003/08/05 11:48:14, 0] nsswitch/winbindd_group.c:winbindd_getgrent(640) could not lookup domain group Domain Users and

Hi, I encountered a problem when I joined a FreeBSD machine to a windows = 2003 AD domain. I passed following steps successfully: 1.#net ads join =A8CUAdministrator =20 2.#wbinfo =A8Cu 3.#wbinfo =A8Cg But when I check: #id Domain\\username (I can find this username using command = =A1=B0wbinfo =A8Cu=A1=B1) Id Domain\\username: no such user =20 I found: After restarting samba, there

Has anyone else gotten samba functioning with idmap_ad and multiple domains? In our environment we have a domain with two child domains. There is one child domain for students, and another for faculty staff. Our servers are joined to the student domain, but need to be able to enumerate users in the staff domain. When attempting to lookup a user (wbinfo -i 'NAU\car3') that only exists

Quick question about Samba and Domain Local groups. Ive got a Samba 3.0.7 server (redhat 8) as a domain member of a 2K Domain in native mode. (security = domain). Std Windows group mgmt says: Users are members of Global Groups. Global Groups are members of local groups Local Groups control access to resources. So ive got a Domain Local group I want to use to restrict access to a samba share:

I have installed SAMBA from the ports collection and have run into a problem. I am using winbind and I am able to list the groups and users from the Windows 2003 Server (wbinfo -u, wbinfo -g, getent passwd, getent group) without any problem. I am able to display the shares on the SAMBA server using net view without any problem. However, when I try to connect to the share, I receive a message

Hi Igor, I got stuck now. I did my best. I got stuck at the winbind which I suspected is the reason why the domainA_computer cannot map the domain_B user's home directory. 1. What are the settings of your winbind? 2. Do you use only "winbind" in your libnss_ldap or use "ldap" as well? 3. My winbind works with :- (For both sides) wbinfo -t wbinfo -p wbinfo -u wbinfo

Hi, I'm trying to get some Ubuntu8.04 clients to authenticate to an Ubuntu8.04 Samba domain controller. Everyone is running Samba 3.0.28a. Side question: should I upgrade to 3.2? Keep in mind that means finding binaries for ubuntu or compiling from source for a server and 20 clients. Basically wbinfo -u and -g work, getent passwd works, getent group DOES NOT WORK. My domain is called

This patch adds support to get free page blocks from a free page list. The physical addresses of the blocks are stored to a list of buffers passed from the caller. The obtained free page blocks are hints about free pages, because there is no guarantee that they are still on the free page list after the function returns. One use example of this patch is to accelerate live migration by skipping the

Hello ! And i have problem with user validation. wbinfo work well, but i cant use de AD users. root at samba01:~# smbclient -L 127.0.0.1 -Ugalerna\\gcarballo Enter GALERNA\gcarballo's password: session setup failed: NT_STATUS_LOGON_FAILURE root at samba01:~# smbclient -L 127.0.0.1 -Ugalerna\\administrator Enter GALERNA\administrator's password: Administrator work with the mapping

I have a member server joined to a samba 3 domain. It was working fine with 3.4.8 but after an upgrade to 3.5.5 (debian lenny with backports) getent group no longer works. getent passwd works fine, wbinfo -u and wbinfo -g work fine I upgraded some other servers which are DC's and those work fine. winbind.log shows [2010/10/21 14:06:13.918006, 3]

Hi, I have a Windows 2012R2 Domain controller and a FreeBSD 10.0 domain member. I can join the domain. All this command are ok and have no error : Wbinfo -u Wbinfo -g Wbinfo -t Wbinfo -S Wbinfo -n Wbinfo -Y But one fails : wbinfo -i administrator failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND Could not get info for user administrator I try to connect with ssh to the server with an domain

Hello all, I have an interesting situation that I'm trying to get working. At this point, I'm not sure if it's possible to do what I want with my configuration. I will start by explaining my situation. I have a primarily windows network in my organization. I also have quite a few UNIX systems as build servers. All these systems share 1 file server (currently a Netapp, but I am moving

Hai, Thank you for having trust in my packages.. :-) Now if you use my package, i suggest, do read the howto's also... All you need for a good setup on debian stretch is there. if anyone find/see's improvements, please tell me... Or change it on github, thats why its there. First is this an upgraded domain? Or a new domain? What does `getent passwd username` tell you. Same for `id