On 20/02/11 01:02, Bob Miller wrote:
Getent passwd works and returns all domain users.

Getent group returns all groups correctly.

Net group map list works and returns correctly mapped groups.

Wbinfo -t returns "checking the trust secret for domain BGS via RPC
calls succeeded".

wbinfo --own-domain returns the correct NT domain name

In short, everything seems to work OK until you run wbinfo -u or -g at
which point it sits there until it times out.  Smb.conf is the same as
the other member servers, the net rpc join command  returned success and
a machine account was successfully created in the LDAP directory. The
smb.conf file is here:
Any suggestions gratefully received.

Thanks,

Julian
I recently played a game similar to this one, for me everything worked
but wbinfo -g.  What I did to resolve that was use `net sam
mapunixgroup` for all the domain groups, and all my group stuff started
magically working.  I doubt that will do anything for your wbinfo -u
problem, but it might move you a step forward.  Or it might not; it is
just a suggestion....



Bob Miller
334-7117/660-5315
http://computerisms.ca
[email protected]
Network, Internet, Server,
and Open Source Solutions



Thanks for that. Gave it a go but no joy so I decided to try making it a BDC to see what would happen. First I tried "net setlocalsid" with the domain sid but it refused to change. I then changed "domain logons = no" to yes and tried again and it set the local SID. Funny thing though was that I'd forgotten to set "security =" to user and had left it as domain but it didn't complain. Samba started and winbind worked.

I also have a new print server going on which had the same problem as the proxy re: winbind. After setting this up as a BDC, it also works fine. The interesting thing is that all the other member servers that are not functioning as BDCs have local sids that are different to the domain sid ( I believe this is how it should be) and they hooked up without a problem. Luckily, I'm running a Samba PDC so I do the BDC thing.

When I have a bit more time I may pursue this and I'll post any info here.

Cheers,

Julian

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to