Hello, I have installed the latest samba rpms from your site. I verified that winbind works properly and the getent issue is resolved.
After starting the samba server I can browse out against the Windows network. The samba server is a member server of an Active Directory domain. Problem: windows clients on network can not browse to samba server. I can ping, do dns lookups, and can see the box in network neighborhood from a windows client. The samba server wants credentials to display shares. I have tried root credentials, domain credentials, and local unix acct. credentials with no success. I understand a guest account is used in this situation, which I have added to the local unix accounts. Can you advise? > # Global parameters > [global] > workgroup = LABOR > realm = LABOR.AK > server string = Samba Server %v > security = ADS > obey pam restrictions = Yes > smb passwd file = /etc/samba/smbpasswd > guest account = guest > log file = /var/log/samba/log.%m > max log size = 50 > name resolve order = wins lmhosts bcast > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > printcap name = cups > os level = 0 > preferred master = No > local master = No > domain master = No > dns proxy = No > wins server = 192.168.1.20 > idmap uid = 10000-20000 > idmap gid = 10000-20000 > template shell = /bin/bash > winbind use default domain = Yes > printer admin = @Domain Admins > printing = cups > > [homes] > comment = Home Directories > read only = No > browseable = yes > guest ok = yes > > [printers] > comment = All Printers > path = /var/spool/samba > create mask = 0700 > guest ok = Yes > printable = Yes > print command = lpr-cups -P %p -o raw %s -r # using client side printer > drivers. > browseable = No > > [print$] > path = /var/lib/samba/printers > write list = @adm, root > guest ok = Yes 2003-12-02 at 23:21, Buchan Milne wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Tim Jordan wrote: > > Hello, > > I took your advice and installed Mandrake 9.2 then pulled down the rpms > > from your site. > > I have joined our Active Directory Domain with no problem. > > Kerberoes is working. > > I can use wbinfo3 -g -u to query domain groups and users but I can't > > seem to use getent for domain groups and users. > > > > Do I need to change a pam file to enable this? I checked everything I > > know like verifying the nsswitch.conf is correct, libnss_winbind.so & > > libnss_winbind.so.2, is present... > > > > I have the following in my smb.conf > > idmap uid > > idmap gid > > winbind enum users > > winbind enum groups > > template homedir > > template shell > > winbind use default domain > > > > When viewing my samba server from a windows workstation it wants a > > username and password. I take it this is because I'm missing something??? > > > > Can you advise? > > I think this is due to one error, the renaming of libnss_winbind.so and > libnss_winbind.so.2 to libnss_winbind3.so and libnss_winbind3.so.2 > (which should work AFAIK). Others have reported that just linking > libnss_winbind.so.2 to libnss_winbin3.so.2, and changing all occurences > of winbind3 in /etc/nsswitch.conf to winbind should do the trick. > > I have adjusted this in the new packages of 3.0.1pre3: > rpm -qlp > public_html/mandrake/9.2/samba-3.0.1/samba3-winbind-3.0.1-0.pre3.2mdk.i586.rpm > /etc/pam.d/system-auth-winbind > /etc/rc.d/init.d/winbind > /lib/libnss_winbind.so > /lib/libnss_winbind.so.2 > /lib/security/pam_winbind.so > /usr/bin/wbinfo > /usr/sbin/winbind > /usr/sbin/winbindd > /usr/share/man/man1/wbinfo.1.bz2 > /usr/share/man/man8/winbindd.8.bz2 > > So, this should not be necessary in future builds for Mandrake 9.2 and > older (in Mandrake 10 and on - as is the case in Mandrake cooker > already, samba-3.0.x will be called samba, and samba-2.2.x will be > called samba2 if we still ship it). > > It may be easier just to use these packages (and feedback on them would > be good ...) > http://ranger.dnsalias.com/mandrake/9.2/samba-3.0.1/ > > Regards, > Buchan > > > - -- > |--------------Another happy Mandrake Club member--------------| > Buchan Milne Mechanical Engineer, Network Manager > Cellphone * Work +27 82 472 2231 * +27 21 8828820x202 > Stellenbosch Automotive Engineering http://www.cae.co.za > GPG Key http://ranger.dnsalias.com/bgmilne.asc > 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.2.3 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQE/zZ0QrJK6UGDSBKcRAjwfAJ9I4PcOSp9simLK/oZkn7YwZBOQbACeP896 > cvwy+qVkabL0ssKRz7beKwU= > =y/PH > -----END PGP SIGNATURE----- > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba