similar to: File sharing is ok, but new ADS user validation is not ok

Hi We have a few Linux samba servers that authenticate against our Active Directory domain (Small Business Server 2000). I've added a couple of disks to a FreeBSD 6.1 server in our office and I'm trying to achieve the same but not having much luck. I'm new to all this... I'm not our network admin, but he is BSD-phobic so I thought it was safer to do it myself.

I am running Samba ver 3.0.37 on Solaris 10 (sparc) as a PDC with LDAP for the backend for both samba and unix accounts. Assume the samba SMBPDC is called "PDC." I have also set up a trust with an Windows domain- lets call it WINDOMAIN- (the PDC for the Windows domain is Win 2003 but is in mixed mode for backwards compat.) The SAMBA domain trusts the WINDOWS domain, not not vice

Hallo, We protect linux/apache server with mod_auth_ntlm_winbind.so to authenticate users with their domain accounts. The server is joined into windows domain (Windows 2003 Server). Apache/mod_auth_ntlm_winbind.so is configured for NTLM+SPNEGO authentication. So far users can login when providing valid credentials. Users login into their windows workstation (Windows XP SP2 IE/Firefox) with

Everyone, I am going nuts trying to figure this problem out. I have successfully joined a SUSE 10 server to our domain and configured samba for ADS authentication. This exact setup works on all my other servers. On this one, I keep getting access denied when entering my domain password despite the fact that I have tried it literally dozens of times. I am 100% confident I am

Hi, we've got a samba-3.0.21a-1 systems that's set up w/ winbind to query AD to authenticate users w/out Unix accts. The system is also set up to support our LDAP'd UNIX accts. After setting the [global] section like this: [global] realm = WIN.OURDOMAIN.COM security = ads password server = thebes balsam encrypt passwords = yes log file = /var/log/samba/log.%m

I had winbind configured so that it could fetch users from AD. Everything was working properly, but something happened in the past couple of days (no change in the Samba config) I'm not able to diagnose. "getent group" enumerates groups, "getent passwd" doesn't. "wbinfo -g" returns groups, whereas I get this error when trying to get users: # wbinfo -u

Hello, I have a customer that complains about slow AD authentication when accessing the share, eventually succeed (Samba is a DC memer) In the logs I can see the following errors: [2020/02/24 14:11:16.775884,? 1] ../source3/libads/ldap_utils.c:93(ads_do_search_retry_internal) ? Reducing LDAP page size from 1000 to 500 due to IO_TIMEOUT [2020/02/24 14:11:16.775902,? 3]

Hello everyone,   any ideas on why a newly installed domain member (w2k8 domain) might seem to work fine in every test (wbinfo -g, wbinfo -t, getent group, wbinfo -n username, getent passwd user, share-access.., ) but only enumeration of users with wbinfo -u and getent passwd fail? wbinfo -u just returns without any output and getent passwd just shows the default centos7 users.   Even with

I had exact the same problem. Try: client ldap sasl wrapping = plain in smb.conf Op 10 jun. 2016 10:44 p.m. schreef Dennis Xu <dxu at uoguelph.ca>: Hello, I see this error when trying "wbinfo -g": [2016/06/09 13:55:33.617151, 3, pid=11847, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:904(ads_do_paged_search_args) ads_do_paged_search_args:

Hello, I see this error when trying "wbinfo -g": [2016/06/09 13:55:33.617151, 3, pid=11847, effective(0, 0), real(0, 0)] ../source3/libads/ldap.c:904(ads_do_paged_search_args) ads_do_paged_search_args: ldap_search_with_timeout((&(objectCategory=group)(&(groupType:dn:1.2.840.113556.1.4.803:=-2147483648)(!(groupType:dn:1.2.840.113556.1.4.803:=1))))) -> Time limit exceeded

Hi i see on my log, two informations : 1- Into my log, i see a very big quantity of : [19391]: lookupname ECTPP/root [2005/12/09 14:28:46, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupname(695) [19391]: lookupname ECTPP/root [2005/12/09 14:28:46, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupname(695) 10x per s .... 600x/minutes .. it's very very big no ? It's possible

I just upgraded from 3.0.23d to 3.0.25 and I'm noticing that winbind is chewing up a lot of CPU usage. There are always 2 winbindd processes and one uses about 80% cpu and the other use 15% cpu. When I run a tcpdump and look at the traffic going to/from the domain controller winbindd is connected to, there is a constant flow of traffic. Here is the winbind setup from my smb.conf file:

On 19/06/15 21:39, Brian.Huffman at dupont.com wrote: > All, > > I'm trying to configure a Samba 3 AD member server including winbind. I'm on RHEL 6.6, so I'm using Samba version 3.6.23. > > Here's my configuration: > [global] > log level = 3 winbind:10 > workgroup = ABC > server string = LV37 > netbios name = LV37

On 22/06/15 13:55, Brian.Huffman at dupont.com wrote: > On , June 20, 2015 5:10 AM, Rowland Penny wrote: >> On 19/06/15 21:39, Brian.Huffman at dupont.com wrote: >>> All, >>> >>> I'm trying to configure a Samba 3 AD member server including winbind. I'm >> on RHEL 6.6, so I'm using Samba version 3.6.23. >>> Here's my configuration:

Samba 3.5.8 on OpenSolaris (SunOS 5.11) Intel platform; gcc 4.2.3; built with "configure --with-winbind --with-krb5 --with-ldap --with-ads" Samba is joined to our Windows-2008 AD domain. Pretty much everything works, except that winbindd can't convert between SIDs and uid/gid: 1. wbinfo -r WIN\\lanz (Returns nothing -- no output) First I obtain my SID from "wbinfo -n

On 22/06/15 14:26, Brian.Huffman at dupont.com wrote: > On Monday, June 22, 2015 9:15 AM ,Rowland Penny wrote: >> On 22/06/15 13:55, Brian.Huffman at dupont.com wrote: >>> On , June 20, 2015 5:10 AM, Rowland Penny wrote: >>>> On 19/06/15 21:39, Brian.Huffman at dupont.com wrote: >>>>> All, >>>>> >>>>> I'm trying to

Hello everybody, I have run into a problem which I am not able to resolve by myself :-( Yesterday I have added a new printer (cups) to a Samba 3.0.28a server. The new printer showed up in the network neighborhood (Windows XP) and I was able to print to the new print queue. Then I tried to publish the new printer to the AD ( we use a windows 2000 server for user administration and GPOs) with the

All, I'm trying to configure a Samba 3 AD member server including winbind. I'm on RHEL 6.6, so I'm using Samba version 3.6.23. Here's my configuration: [global] log level = 3 winbind:10 workgroup = ABC server string = LV37 netbios name = LV37 idmap config *:backend = tdb idmap config *:range = 2000-9999 idmap config

Hi, Using samba 3.0.25b, testing to join to a Windows 2008 domain using ADS security with kerberos and it doesn't seem to work. Anybody else tried this combination? Same configuration worked joining to a Windows 2003 R2 domain. I'm not a samba expert but looking at the log it looks like the not_defined_in_RFC4178@please_ignore have something to do with it? Output from "net

I updated my PDC and BDC to Samba 4.4.7. Compiled from source into /usr/local/samba. On the samba domain controllers "/usr/local/samba/bin/wbinfo -u" shows the local domain users but not the trusted one. Everything indicates trusts are ok # /usr/local/samba/bin/net rpc trustdom list -U Administrator Enter Administrator's password: Trusted domains