-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tim Jordan wrote: > Hello again, > I'm just getting back to testing your rpm builds for samba. > > Question: What kerberoes package are you using with your build?
The packages that ship with the specific distro (otherwise I would have to provide them too ...). On 9.2, it's 1.3.x. > > I'm doing a wbinfo -u and getting all users in domains that my AD domain > trusts and the local account but none from the domain I'm a Domain > Member Server of. Have you tried without the "winbind use default domain"? It might have an effect ... > > I get the same result with getent passwd | grep /username/ And 'getent passwd' shows the domain users of the trusted domains? If so, then winbind is working, so it may be a samba bug, you may want to file a bug in samba bugzilla. > > I do have a kerberoes ticket for my domain. I can log into a smb share > on an XP workstation and 2K server... > > Here is my current smb.conf: > > >>#======================= Global Settings ===================================== >>[global] >> >># 1. Server Naming Options: >> workgroup = LABOR >> realm = LABOR.AK >> server string = Samba Server %v >># 2. Printing Options: >> printcap name = cups >> load printers = yes >> printing = cups >># This should work well for winbind: >> printer admin = @"Domain Admins" >> >># 3. Logging Options: >> log file = /var/log/samba3/log.%m >> max log size = 50 >> log level = 3 >> >># 4. Security and Domain Membership Options: >> security = ads >> password server = /IP OF PDC/ >> encrypt passwords = yes >> >># 5. Winbind >> winbind uid = 10000-20000 >> winbind gid = 10000-20000 >> winbind use default domain = yes >> template homedir = /home/%D/%U >>; obey pam restrictions = yes >> template shell = /bin/bash >> >># 5. Browser Control and Networking Options: >> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 >> local master = no >> os level = 0 >> domain master = no >> preferred master = no >> >># 6. Domain Control Options: >> domain logons = no >> add user script = /usr/sbin/useradd -s /bin/false '%u' >> idmap uid = 10000-20000 >> idmap gid = 10000-20000 >> >> >># 7. Name Resolution Options: >> name resolve order = wins lmhosts bcast >> wins server = IP OF WINS SERVER >> dns proxy = no >> >> >>#============================ Share Definitions ============================== >>[homes] >> comment = Home Directories >> browseable = no >> writable = yes >> >>[printers] >> comment = All Printers >> path = /var/spool/samba3 >> browseable = no >># to allow user 'guest account' to print. >> guest ok = yes >> writable = no >> printable = yes >> create mode = 0700 >># ===================================== >># print command: see above for details. >># ===================================== >> print command = lpr-cups -P %p -o raw %s -r # using client side printer drivers. >> >>[print$] >> path = /var/lib/samba3/printers >> browseable = yes >> read only = yes >> write list = @adm root >> guest ok = yes >> >>[pdf-generator] >> path = /var/tmp >> guest ok = No >> printable = Yes >> comment = PDF Generator (only valid users) >> #print command = /usr/share/samba3/scripts/print-pdf file path win_path recipient IP & >> print command = /usr/share/samba3/scripts/print-pdf %s ~%u //%L/%u %m %I "%J" & It looks fine, but I don't have a production network to test on at present (I have a production box in a win2k network, but it's running 2.2.x and I won't be able to try samba3 on it any time soon). Regards, Buchan - -- |--------------Another happy Mandrake Club member--------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x202 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/1iKYrJK6UGDSBKcRAguiAKCqNAD1NGt+jsmFW6dOLEcm4A2GygCdEZWR pxgY6wiNwS5GFANRSZ3yARA= =skI4 -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
