Thanks scott. I am going to try the pam restrictions to see if that helps! -----Original Message----- From: Scott Wrosch [mailto:swrosch@;MarketingAssociates.com] Sent: Wednesday, October 30, 2002 1:52 PM To: Jennifer Fountain; [EMAIL PROTECTED] Subject: RE: [Samba] Groups and Samba and Winbind
Hello Jennifer, I'm a relative noob to Samba, so I may be off base, but I'll offer what I can. Unless it's a mis-type, re-type the groups command like this: groups ntdomain\jfountain Also, I've found that I need to use the domain as well when I'm using wbinfo as you have below. For instance, when I run it, I get this: [root@linux-38 samba]# wbinfo -r ma_swros 10000 10011 [root@linux-38 samba]# I'm sure there's a switch though for converting from numbers to names. Also, the -r switch does resolve to UNIX numbers, not names. Unfortunately, I don't know why groups would be returning the UNIX group number. Mine looks like this: [MA_swros@linux-38 swros]$ groups MA_Domain Users MA_mis [MA_swros@linux-38 swros]$ And, here's my Winbind related portion of smb.conf for comparison: # Winbind entires. winbind separator = _ winbind uid = 10000-20000 winbind gid = 10000-20000 winbind enum users = yes winbind enum groups = yes template shell = /bin/bash # Tell Samba that yes, it does need to obey pam restrictions obey pam restrictions = yes When I initially got everything up and running, I was using the \ as my separator as well. Unfortunately I had issues with it and changed it to the _. I doubt that has anything to do with it, but it is possible. Hope my meaningless drivel has helped some, even though I'm really only offering comparisons. Regards, Scott Scott Wrosch desk 248.333.7700 x227 pager 248.806.7657 text [EMAIL PROTECTED] email [EMAIL PROTECTED] "Our greatest glory is not in never falling but in rising every time we fall." -- Confucius -----Original Message----- From: Jennifer Fountain [mailto:JFountain@;rbinc.com] Sent: Wednesday, October 30, 2002 1:38 PM To: [EMAIL PROTECTED] Subject: [Samba] Groups and Samba and Winbind I am having an issue with winbind/samba and my groups. when I type the following: $ groups ntdomain\\jfountain I get the following nothing. When i type this (logged in as jfountain) $ groups I get the following: $ 50000 I am assuming this means domain admins. when i type $./wbinfo -r jfountain I get the following: 50016 50017 50018 50019 50020 50021 50010 50022 50023 50000 I don't know where the disconnect is in winbind. why iam not getting my group listing instead of numbers wbinfo -g gets all the groups with no problem. here is my smb.conf [global] workgroup = ntdomain netbios name = samba server string = SAMBA interfaces = lan4 127.0.0.1 bind interfaces only = Yes security = DOMAIN encrypt passwords = Yes password server = server1 username map = /etc/smbusers socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 preferred master = False local master = No domain master = False wins server = 11.1.7.2 winbind uid = 40000-49999 winbind gid = 50000-59999 template shell = /usr/bin/ksh winbind separator = \ winbind cache time = 15 winbind enum users = Yes winbind enum groups = Yes winbind use default domain = Yes my nsswitch.conf passwd: files winbind groups: files winbind Any thoughts, ideas? what did i not do? Thanks!!! Jenn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
