Selon Buchan Milne <[EMAIL PROTECTED]>: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > Date: Wed, 5 Nov 2003 21:48:18 +0100 > > From: Thomas Sillard <[EMAIL PROTECTED]> > > Subject: [Samba] Samba 3.0.1pre1 winbind / getent problems > > To: [EMAIL PROTECTED] > > Message-ID: <[EMAIL PROTECTED]> > > Content-Type: text/plain; charset="us-ascii" > > > > Hi, > > > > I've got some problems with winbind and ADS Domain Membership stuff. > > I've joined the domain without problems with "kinit [EMAIL PROTECTED]" and > > "net ads join", i can see the machine account in AD with ldapbrowser. > > Klist give me three tickets, as say in the documentation, OK. > > I created the idmap entry in my openldap (with samba3 schema), OK. > > I've set the ldap admin password in the secrets.tdb, OK (ldap idmap). > > Starting service smb3, OK. > > Starting service winbind3, OK. > > wbinfo -u and wbinfo - g give me the list of users and groups correctly, > > wbinfo -a user%passord works fine, OK. > > > > BUT > > > > When i try a "getent passwd" or "getent group", i don't have the windows > > users. I can't see or connect to the shares on the linux box with > windows file > > explorer (it prompts me a user/password). It works fine with samba > 2.2.7a. > > I've installed the samba3 mandrake package, wich suffixes all libs and > > executables with the samba version's number (eg. for libnss_winbind.so -> > > libnss_winbind3.so, smbpasswd -> smbpasswd3). > > Only the default packages. Since you're running on 9.1, you either are > running cooker packages on 9.1 (not suggested, since cooker/9.2 have > openldap-2.1.x and kerberos 1.3.x) or you rebuilt the SRPM. >
I'm running 9.1 with openldap-2.0.27 and kerberos-1.2.7. Will it be better with openldap-2.1.x and kerberos-1.3.x ? > If you rebuilt the SRPM, you might as well add the '--with system' > switch when you build it, and you will get 'samba-3.0.1' packages > without suffixes. > Ok, great, i'll try to rebuild with "--with system" to replace the 2.2.7 packages with the 3.0.1pre1. > > > > What's the problem ? Where is my error ? Is the mdk version suffixing > > can be the source of the problem ? > > I am quite sure I tested this, and that it worked, but that was quite a > while ago, and I didn't have much time availble to test it then. If it > doesn't work for you, I can introduce alternatives for the winbind files > (as we have on 9.2 for the client binaries). > It works now with a ln -s /lib/libnss_winbind3.so /lib/libnss_winbind.so.2 and a ldconfig after. "ldap idmap backend" works fine also and i can share the ldap idmap database with my two samba servers (same ids on the two boxes, a RH7.3 and MDK 9.1). The only problem now is that my log files (with log level = 1 in smb.conf) are full of lines like these : nov 7 15:27:24 smb1 winbindd[17179]: [2003/11/07 15:27:24, 0] nsswitch/winbindd.c:process_loop(715) nov 7 15:27:24 smb1 winbindd[17179]: process_loop: Invalid request size from pid 17533: 1304 bytes sent, should be 1568 What's this ? > Unfortunately I don't have a production AD network to test on, so any > feedback on improvements to the Mandrake packages with regard to winbind > would be appreciated (and any other aspects, but I have two samba+ldap > networks, one currently running 2.2.8a and one running 3.0.1pre1). > > Regards, > Buchan > > - -- > |--------------Another happy Mandrake Club member--------------| > Buchan Milne Mechanical Engineer, Network Manager > Cellphone * Work +27 82 472 2231 * +27 21 8828820x202 > Stellenbosch Automotive Engineering http://www.cae.co.za > GPG Key http://ranger.dnsalias.com/bgmilne.asc > 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.3 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQE/q7iSrJK6UGDSBKcRAo/iAKCX3vLJUzKqvk/+PoqjSNV/dGbygwCeITy0 > 5D6rU06FJbb4ZtaxEsZhdMU= > =mz26 > -----END PGP SIGNATURE----- > > -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
