Re: Fwd: [Samba] Re: Getting NTLM group info about user
On Wed, Jun 07, 2006 at 09:08:30AM -0400, Jeremiah Martell wrote: > How do you map these unix group ids to the active directory group > names? Like the group's DN, or CN, or ? This is normal winbind operation. You certainly have to set the 'idmap uid' and 'idmap gid' parameters. Volker pgpzOe5LwYeuF.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Fwd: [Samba] Re: Getting NTLM group info about user
How do you map these unix group ids to the active directory group names? Like the group's DN, or CN, or ? Thanks! - Jeremiah (still working on getting samba-3.0.22 to compile for me...) On 6/6/06, Volker Lendecke <[EMAIL PROTECTED]> wrote: On Tue, Jun 06, 2006 at 02:47:30PM -0400, Jeremiah Martell wrote: > Just out of curiousity, what should the output look like when I do a > "wbinfo -r user"? Do I get the LDAP DN's of the groups? Just the CN > attribute of the group? You should get a list of unix group ids. Volker -- - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Fwd: [Samba] Re: Getting NTLM group info about user
On Tue, Jun 06, 2006 at 02:47:30PM -0400, Jeremiah Martell wrote: > Just out of curiousity, what should the output look like when I do a > "wbinfo -r user"? Do I get the LDAP DN's of the groups? Just the CN > attribute of the group? You should get a list of unix group ids. Volker pgpAeq7geBLFO.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Fwd: [Samba] Re: Getting NTLM group info about user
Just out of curiousity, what should the output look like when I do a "wbinfo -r user"? Do I get the LDAP DN's of the groups? Just the CN attribute of the group? Thanks, - Jeremiah On 6/6/06, Volker Lendecke <[EMAIL PROTECTED]> wrote: On Tue, Jun 06, 2006 at 10:24:30AM -0700, Doug VanLeuven wrote: > Hi Volker, > I don't have 3.0.23rc1, but svn from just a few days ago. > > [EMAIL PROTECTED] ~]# smbd -V > Version 3.0.23pre2-SVN-build-15985 > [EMAIL PROTECTED] ~]# wbinfo -a doug% > plaintext password authentication succeeded > challenge/response password authentication succeeded > [EMAIL PROTECTED] ~]# wbinfo -r doug > Could not get groups for user doug Please file a bug report at https://bugzilla.samba.org/ with your smb.conf and all winbind logfiles at debug level 10. Thanks, Volker -- - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Fwd: [Samba] Re: Getting NTLM group info about user
On Tue, Jun 06, 2006 at 10:24:30AM -0700, Doug VanLeuven wrote: > Hi Volker, > I don't have 3.0.23rc1, but svn from just a few days ago. > > [EMAIL PROTECTED] ~]# smbd -V > Version 3.0.23pre2-SVN-build-15985 > [EMAIL PROTECTED] ~]# wbinfo -a doug% > plaintext password authentication succeeded > challenge/response password authentication succeeded > [EMAIL PROTECTED] ~]# wbinfo -r doug > Could not get groups for user doug Please file a bug report at https://bugzilla.samba.org/ with your smb.conf and all winbind logfiles at debug level 10. Thanks, Volker pgpgE32r4U9op.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Fwd: [Samba] Re: Getting NTLM group info about user
Volker Lendecke wrote: On Tue, Jun 06, 2006 at 12:02:42PM -0400, Jeremiah Martell wrote: wbinfo -t checking the trust secret via RPC calls succeeded wbinfo -r test Could not get groups for user test wbinfo -a test%test challenge/response password authentication succeeded wbinfo -r test Could not get groups for user test Yes, that looks correct. The idea is that this does work. But please also try 3.0.23rc1 if you can. Hi Volker, I don't have 3.0.23rc1, but svn from just a few days ago. [EMAIL PROTECTED] ~]# smbd -V Version 3.0.23pre2-SVN-build-15985 [EMAIL PROTECTED] ~]# wbinfo -a doug% plaintext password authentication succeeded challenge/response password authentication succeeded [EMAIL PROTECTED] ~]# wbinfo -r doug Could not get groups for user doug I also tried wbinfo -K administrator%xx -r doug plaintext kerberos password authentication for [administrator%xx] succeeded (requesting cctype: FILE) credentials were put in: FILE:/tmp/krb5cc_0 plaintext kerberos password authentication for [administrator%xx] succeeded (requesting cctype: KCM) no credentials cached plaintext kerberos password authentication for [administrator%xx] succeeded (requesting cctype: KCM:0) no credentials cached plaintext kerberos password authentication for [administrator%xx] succeeded (requesting cctype: Garbage) no credentials cached plaintext kerberos password authentication for [administrator%xx] succeeded (requesting cctype: (null)) no credentials cached plaintext kerberos password authentication for [administrator%xx] succeeded (requesting cctype: 0) no credentials cached Could not get groups for user doug Regards, Doug -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: Fwd: [Samba] Re: Getting NTLM group info about user
On Tue, Jun 06, 2006 at 12:02:42PM -0400, Jeremiah Martell wrote: > wbinfo -t > checking the trust secret via RPC calls succeeded > wbinfo -r test > Could not get groups for user test > wbinfo -a test%test > challenge/response password authentication succeeded > wbinfo -r test > Could not get groups for user test Yes, that looks correct. The idea is that this does work. But please also try 3.0.23rc1 if you can. Volker pgp99IgPAXOhw.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Fwd: [Samba] Re: Getting NTLM group info about user
-- Forwarded message -- From: Jeremiah Martell <[EMAIL PROTECTED]> Date: Jun 6, 2006 12:02 PM Subject: Re: [Samba] Re: Getting NTLM group info about user To: [EMAIL PROTECTED] wbinfo -t checking the trust secret via RPC calls succeeded wbinfo -r test Could not get groups for user test wbinfo -a test%test challenge/response password authentication succeeded wbinfo -r test Could not get groups for user test I searched samba lists and found that I may need to try putting "client schannel = no" in my smb.conf file. I did that, and I get the same response. I'm currently use samba 3.0.14a. I'll try downloading the latest 3.0.22 and see how that goes. Thanks for the reply! It let me know I was at least doing everything correctly. :) - Jeremiah On 6/6/06, Volker Lendecke <[EMAIL PROTECTED]> wrote: On Tue, Jun 06, 2006 at 09:44:24AM -0400, Jeremiah Martell wrote: > >I use samba on my linux box to register to a remote windows domain. I > >start up winbindd. Then I use "net join -S PDC -U user%pass" to join > >to the domain. I can test it out by authenticating myself with "wbinfo > >-a user%pass" which works fine. > > > >Id like to get back what groups I'm in. I tried "wbinfo -r ME" but it > >doesn't work: "Could not get groups for user ME". I've verified that I > >am actually in some groups in the windows box (active directory). Did you log in using wbinfo -a before issuing the wbinfo -r? If not, then there is not much hope. If you did, we have a bug. We have made a lot of changes here for 3.0.23, so it would be great if you could test 3.0.23rc1 or even better current 3_0 SVN. Volker -- - Jeremiah [EMAIL PROTECTED] -- - Jeremiah [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
