similar to: Help with winbind getusersids across forests

Hello We are trying to implement SSO with mod_auth_ntlm_winbind. We followed the instructions on [1], but have the issue that users can not authenticate with web browsers. In addition to that document we did the following extra steps: - chown root:winbind /var/lib/samba/winbindd_privileged/ - apache user (vagrant) is in group winbind - net setauthuser -U vagrant - smb.conf has: winbind use

Thanks for your time. Now,  wbinfo -G 13010 and wbinfo -Y work. But I still don't see any domain users in getent passwd, and wbinfo --user-sids=S-1-5-21-2816186202-4468957523-2022743653-4403 still fails with getusersids S-1-5-21-2816186202-4468957523-2022743653-4403 [2019/05/03 15:50:51.978858,  3, pid=910, effective(0, 0), real(0, 0), class=winbind]

Le 03/05/2019 à 16:20, L.P.H. van Belle a écrit : > Hai, > > wbinfo -Y S-1-5-21-2816186202-4468957523-2022743653-513 > Does this resolve? > You should see "domain users" I see 13010 (that's normal according to the doc) but wbinfo --sid-to-fullname S-1-5-21-2816186202-4468957523-2022743653-513 give me "domain users" > > And your missing your

Hi Samba experts, I am currently investigating an issue with a bigger winbindd installation which causes all following winbindd requests to fail until winbindd is restarted. We use a slightly patched version of winbindd based on Samba 3.5.8. In the used setup the winbindd is joined to an AD domain and is quite busy with answering winbindd requests of type PAM_AUTH_CRAP, LOOKUPNAME, GETUSERSIDS,

Hai, wbinfo -Y S-1-5-21-2816186202-4468957523-2022743653-513 Does this resolve? You should see "domain users" And your missing your primary dnsdomain. (search) Go here. https://github.com/thctlo/samba4/blob/master/full-howto-Ubuntu18.04-samba-AD_DC.txt Your missing, ( see line 370 ) search: [ internal.example.com ] Add it.. Also i missed 2 other points. smb.conf add:

A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6083 bytes Desc: not available URL: <http://lists.samba.org/pipermail/samba/attachments/20120625/569cea1a/attachment.bin>

Hi, Louis, Rowland, thanks for you answer. @Louis All packages were installed. I change my config file following your advices, the problem is still here. I already followed guides from thctlo's github. @Rowland Yes, my dns domain was different, but answered also to test.lan. It's now set to 'kdc=dc.foo.lab' I have my user vincent with uidNumber 10010 and gidNumber 13010

Hi, i never post in this list before becouse all the developers did a great job before, but now i have a problem. I used samba 3.0.x for a long time without any problem with openldap as passwd backend, now with samba 3.0.12 there are stange message when i try to change account's passwd: # smbpasswd Administrator New SMB password: Retype new SMB password: account_policy_get: tdb_fetch_uint32