I had a problem with winbind talking to one to my ADS here,
not exactly like your situation, but the following might work, READ THE WARNING, YMMV:


stop winbind
stop nmb
stop smb

cd /var/lib/samba(*?* not sure of location on RedHat)
rm -rfv winbind*

# WARNING!##############################################################
# THE ABOVE WILL REMOVE ANY PREVIOUS RECORDED MAPPINGS FOR UID's ->
# SID's! NEW MAPPINGS WILL BE GENERATED THAT MOST CERTAINLY WILL NOT BE
# THE SAME UNLESS YOU USE
# idmap backend = idmap_rid:DOMAIN=1000-100000000
# idmap uid = 1000-100000000
# idmap gid = 1000-100000000
# PLEASE UNDERSTAND THE CONSEQUENCES OF idmap_rid BEFORE USING.
# WARNING!##############################################################

rm secrets.tdb (located in /etc/samba on SuSE, RedHat ?)
net -U domain_admin ads join

start nmb
start smb
start winbind

I also have "use kerberos keytab = yes" in my /etc/samba/smb.conf

Danna Dowdy wrote:
Platform is RedHat....
$ ps -axc | grep winbind
4792 ?        S      0:00 winbindd
4793 ?        S      0:00 winbindd


Michael Joyner wrote:

wbinfo -p is trying to tell you the wrong thing. :)

ps axc | grep winbind

if there is no output your winbind is not running.

what is your platform?

SuSE, RedHat, FreeBSD, Other?


winbindd.log
[2005/05/11 12:34:43, 1] libsmb/clikrb5.c:ads_krb5_mk_req(415)
ads_krb5_mk_req: krb5_mk_req_extended failed (Ticket expired)
[2005/05/11 12:34:43, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(539)
spnego_gen_negTokenTarg failed: Ticket expired
[2005/05/11 12:34:43, 1] nsswitch/winbindd_ads.c:ads_cached_connection(81)
ads_connect for domain DOMAIN failed: Cannot read password
[2005/05/11 12:34:43, 1] nsswitch/winbindd_util.c:init_domain_list(322)
Could not fetch sid for our domain DOMAIN
[2005/05/11 12:34:43, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(539)
spnego_gen_negTokenTarg failed: No credentials cache found






-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Reply via email to