On Thu, 11 Apr 2002, Orwig, Paul wrote: > Just so I understand... > The fact that wbinfo -t replies with "secret is good" says that it is able > to talk to the domain controller and should be able to request users/group > listing. Right?
Well, yes, but, as Tim pointed out in response to my erroneous statement, the fact that wbinfo -t says that the secret is good means that the trust account secrets stored in tdb are OK. winbindd uses anonymous connections to retrieve its information by default, unless you have told it a valid account and password on the DC[s]. In the presence of restrict-anonymous, this will not work, and if some of your DCs have restrict-anonymous set and some not, you may get intermittent failures. Regards ----- Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
