Displaying 20 results from an estimated 200 matches similar to: "winbind AD nested group issues"
2012 May 14
2
idmap_ad partially stopped working after upgrading Samba from 3.4.3 to 3.6.3
Dear list,
upgrading from SLES11 SP1 to SLES11 SP2, I upgraded Samba from 3.4.3
to 3.6.3. I was successfully using idmap_ad to authenticate users but
after the upgrade it stopped working and users are not seen by the OS.
Obviously the users I want to see on the Linux server have all RFC2307
attributes populated and are seen by all other SLES11 SP1 servers.
I checked everything (I know) from the
2013 Nov 06
0
mod_auth_ntlm_winbind SSO
Hello
We are trying to implement SSO with mod_auth_ntlm_winbind.
We followed the instructions on [1], but have the issue that users can
not authenticate with web browsers.
In addition to that document we did the following extra steps:
- chown root:winbind /var/lib/samba/winbindd_privileged/
- apache user (vagrant) is in group winbind
- net setauthuser -U vagrant
- smb.conf has: winbind use
2013 Jan 30
1
uid/gid not being used when logging into RHEL -> Windows Server 2012 Active Directory
I am using samba/winbind to connect a RHEL5.8 linux box to a new Windows
Server box which has Unix Identity Mapping installed. So I have all the
uidNumber/gidNumber stuff in the windows schema.
I am able to login but I am not getting the right uid/gid. My AD uids start
at around 800. FYI I am new to winbind. Apparently the ID mapping has
changed again in samba 3.6 but I'm not really
2015 Jun 19
2
Samba 3 AD Member Server Strangeness
All,
I'm trying to configure a Samba 3 AD member server including winbind. I'm on RHEL 6.6, so I'm using Samba version 3.6.23.
Here's my configuration:
[global]
log level = 3 winbind:10
workgroup = ABC
server string = LV37
netbios name = LV37
idmap config *:backend = tdb
idmap config *:range = 2000-9999
idmap config
2015 Jun 22
2
Samba 3 AD Member Server Strangeness
On , June 20, 2015 5:10 AM, Rowland Penny wrote:
>
> On 19/06/15 21:39, Brian.Huffman at dupont.com wrote:
> > All,
> >
> > I'm trying to configure a Samba 3 AD member server including winbind. I'm
> on RHEL 6.6, so I'm using Samba version 3.6.23.
> >
> > Here's my configuration:
> > [global]
> > log level = 3 winbind:10
2012 Sep 27
3
3.6.8: Winbind/Active Directory: lsass.exe process run cpu to 100%
Dear
I have connected samba 3.6.8 to my Active Directory in the lsass.exe run to
100%
When stopping winbind the lsass.exe CPU is down to 0%
When set winbindd to debug mode, it seems it try to scan the root user every
time.
I would to know how to ban nsswitch to query winbindd for system internal
users such has root, apache.....
Here it is my nsswitch.conf :
#
# Example configuration of GNU
2014 Feb 15
2
Samba 4.1.4 nsswitch/winbind issues
The two domain controllers (Debian) and the member server (CentOS) are all
running Samba 4.1.4 from the sernet packages. The member server I am
testing from was fully patched as of this morning.
Things that work:
- wbinfo -u
- wbifno -g
- getent group {ad_group}
Things that don't work:
- getent passwd {any_ad_user}
- getent group
- getent passwd
I jacked up the winbindd
2014 Mar 27
0
Help with winbind getusersids across forests
I am hoping someone can shed some light on this. We have a setup that is using Active Directory Windows 2008 R2 with 2 domains, A and B. They are across forests, with a one-way trust between the forests. A is the trusted domain, B is the trusting domain. We have a 3.6.9 samba server joined to B's Active Directory. If we try authenticating from our machine in B's domain as a user from A
2018 Nov 13
2
winbind service panics "randomly"
Hi all,
on a recently installed samba file server, the winbind service crashes
apparently randomly. Every few hours it's necessary to restart the winbind
service and then it works for a few more hours. Any ideas are welcome.
1) the environment: 2 debian stretch DC's with round-robind bind+dhcp with
dns-update. 1 fileserver also (AD backend) on debian stretch. All on self
compiled samba
2015 Jun 22
2
Samba 3 AD Member Server Strangeness
On Monday, June 22, 2015 9:15 AM ,Rowland Penny wrote:
> On 22/06/15 13:55, Brian.Huffman at dupont.com wrote:
> > On , June 20, 2015 5:10 AM, Rowland Penny wrote:
> >> On 19/06/15 21:39, Brian.Huffman at dupont.com wrote:
> >>> All,
> >>>
> >>> I'm trying to configure a Samba 3 AD member server including
> >>> winbind. I'm
2015 May 18
1
Getent group don't work
Hi
Oracle Linux Server client with Samba 3.6.23 (file server) joined to the
Samba4 AD domain.
----------------
smb.conf
[global]
#--authconfig--start-line--
netbios name = FS
server string = "GSDAD Fileserver"
workgroup = GSDAD
realm = AD.GSD.LAN
security = ads
winbind use default domain = yes
idmap config * : backend = rid
idmap config * : range =
2008 Jan 21
10
[Bug 14192] New: nouveau on NV17: screen remains black with randr12 on
http://bugs.freedesktop.org/show_bug.cgi?id=14192
Summary: nouveau on NV17: screen remains black with randr12 on
Product: xorg
Version: git
Platform: x86 (IA32)
OS/Version: Linux (All)
Status: NEW
Severity: normal
Priority: medium
Component: Driver/nouveau
AssignedTo: nouveau at
2018 Feb 21
2
Could not convert sid: NT_STATUS_NO_SUCH_USER
hi all,
I can't figure out why winbind can't find ad users with wbinfo calls.
It happens on a member server, Debian GNU/Linux stretch, samba is 4.7.5
from Louis repository:
[global]
security = ADS
workgroup = EXAMPLEAD
realm = EXAMPLE.ORG
idmap config * : backend = tdb
idmap config * : range = 1000000-3000000
idmap config EXAMPLEAD:backend = ad
idmap config
2014 Apr 26
1
SIGSEGV with pam_winbind kerberos authentication
Hello,
I can't get Kerberos authentication works with my Linux clients.
Server : samba 4.1.4 (compiled from source)
Client : Debian Wheezy with sernet-samba 4.0.17-8
Without Kerberos authentication, everything works :
-> the domain users can log with pam_winbind (with ssh, gdm ....).
-> "kinit myuser at MYREALM" works fine.
-> "wbinfo -K MYDOM\\myuser" works.
2014 Apr 22
1
35 second wait when cache expired
Hello,
I've got an issue with RHEL6 running smbd & winbindd version
3.6.9-168.el6_5. This is authenticating against a Windows 2008R2 domain
using the rid backend.
If I run any command that has to look up user info I get a 35 second delay,
after this initial delay it's fine until the cache time-out, then it
happens again.
This is making logins and most commands hang for 35 seconds
2001 Nov 28
1
Reading output from "debugfs -R stat <8>"
Hi,
I'm trying to understand if my journal is fragmented. Here's some output
from `debugfs -R "stat <8>" /dev/sda3`:
Inode: 8 Type: regular Mode: 0600 Flags: 0x0 Generation: 0
User: 0 Group: 0 Size: 104857600
File ACL: 0 Directory ACL: 0
Links: 1 Blockcount: 205016
Fragment: Address: 0 Number: 0 Size: 0
ctime: 0x3c0442fd -- Tue Nov 27
2015 Apr 14
3
wbinfo -u/-g/-n works, but not 'wbinfo -i' or 'id'
On 14/04/15 20:59, Adam Tauno Williams wrote:
> On Tue, 2015-04-14 at 15:20 +0100, Rowland Penny wrote:
>> On 14/04/15 14:59, Adam Tauno Williams wrote:
>>> On Thu, 2014-10-30 at 13:41 -0300, Horacio G. de Oro wrote:
>>>> Hi! I'm trying to add a member to be used as fileserver, following the
>>>> guides at:
>>>> -
2015 Apr 15
1
wbinfo -u/-g/-n works, but not 'wbinfo -i' or 'id'
Quoting Adam Tauno Williams <awilliam at whitemice.org>:
>>>> It should work, it sounds like a mis-configuration somewhere, can you
>>>> post the smb.conf, /etc/nsswitch.conf, /etc/resolv.conf and
>>>> /etc/krb5.conf from the member server.
>>> "wbinfo -u" lists 415 lines
>>> "getent passwd" returns 93 lines
2007 Dec 28
6
[Bug 13843] New: swfplay: Fatal IO error 104 (Connection reset by peer) on X server
http://bugs.freedesktop.org/show_bug.cgi?id=13843
Summary: swfplay: Fatal IO error 104 (Connection reset by peer)
on X server
Product: swfdec
Version: git
Platform: x86-64 (AMD64)
URL: http://red-bean.com/proski/loading.swf
OS/Version: Linux (All)
Status: NEW
Severity: normal
2016 Apr 18
3
FW: Domain member seems to work, wbinfo -u not (update4)
Ok. I've done the following, any samba dev, please read below.
Looks to me some bug in librpc/ndr/ndr.c
But im not a coder.. so please have a look.
Environment.
Debian Jessie, samba 4.2.10 (debian)
I remove my proxy2 server from the domain, cleared up the AD.
Removed all content from /var/(lib/cache)/samba
Removed all other unnneeded services for this test.
Removed all