Hi,
I'm trying to get some Ubuntu8.04 clients to authenticate to an Ubuntu8.04
Samba domain controller. Everyone is running Samba 3.0.28a.
Side question: should I upgrade to 3.2? Keep in mind that means finding
binaries for ubuntu or compiling from source for a server and 20 clients.
Basically wbinfo -u and -g work, getent passwd works, getent group DOES NOT
WORK.
My domain is called ORA and I've set up some test users,etc. See the output of
wbinfo and getent below. Following the output of wbinfo is my smb.conf's for
the server and client.
When my domain users login everything works except that there's no group name,
only a gid.
in the log.winbind I get this:
[2008/08/01 22:11:26, 1] nsswitch/winbindd_group.c:fill_grent_mem(365)
could not lookup membership for group sid
S-1-5-21-2023487214-2483299788-1506694197-1009 in domain ORA (error:
NT_STATUS_NO_SUCH_GROUP)
[2008/08/01 22:11:26, 0] nsswitch/winbindd_group.c:winbindd_getgrent(1110)
could not lookup domain group ORA\bob3
output of getent and wbinfo
----------------------------------
[EMAIL PROTECTED]:~$ wbinfo -u
ORA\bob3
ORA\smbadmin
ORA\bob4
ORA\bob
ORA\bob2
[EMAIL PROTECTED]:~$ wbinfo -g
BUILTIN\administrators
BUILTIN\users
ORA\bob
ORA\domain admins
ORA\bob3
ORA\bob4
ORA\bob2
ORA\server admins
ORA\hosts
[EMAIL PROTECTED]:~$ getent passwd | egrep ORA
ORA\bob3:*:31006:10513::/home/ORA/bob3:/bin/bash
ORA\smbadmin:*:13016:10513::/home/ORA/smbadmin:/bin/bash
ORA\bob4:*:31008:10513::/home/ORA/bob4:/bin/bash
ORA\bob:*:13012:10513::/home/ORA/bob:/bin/bash
ORA\bob2:*:31000:10513::/home/ORA/bob2:/bin/bash
[EMAIL PROTECTED]:~$ getent group | egrep ORA
[EMAIL PROTECTED]:~$ getent group | tail -5
sambashare:x:125:ubuntu01
winbindd_priv:x:126:
dirmngr:x:127:
BUILTIN\administrators:x:10000:
BUILTIN\users:x:10001:
[EMAIL PROTECTED]:~$ smbd -V
Version 3.0.28a
[EMAIL PROTECTED]:~$
smb.conf for server:
------------------------
[global]
log level = 2
workgroup = ORA
netbios name = SAMBA1
server string = %h server (Samba, Ubuntu)
passdb backend = tdbsam
security = user
encrypt passwords = yes
domain logons = yes
preferred master = yes
logon path =
logon home =
logon drive = P:
enable privileges = yes
domain master = yes
os level = 33
local master = yes
add machine script = /usr/sbin/useradd -g hosts -s /bin/false '%u'
add user script = /usr/sbin/useradd -m '%u'
delete user script = /usr/sbin/userdel '%u'
rename user script = /usr/sbin/usermod -l '%unew' '%uold'
add group script = /usr/sbin/groupadd '%g'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/sbin/usermod -a -G '%g' '%u'
delete user from group script = deluser '%u' '%g'
set primary group script = /usr/sbin/usermod -g '%g' '%u'
[public]
path = /export/tmp
read only = No
[netlogon]
comment = Net Logon service
path = /data/netlogon
read only = yes
write list = +ntadmin
[profiles]
comment = User roaming profiles
path = /data/profiles
valid users = %U
create mask = 0600
directory mask = 0700
read only = no
guest ok = no
[homes]
comment = Home directory for %U
read only = no
valid users = %S
smb.conf for client
-------------------------
[global]
workgroup = ORA
server string = %h server (Samba, Ubuntu)
dns proxy = no
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d
security = Domain
encrypt passwords = true
password server = samba1
passdb backend = tdbsam
obey pam restrictions = yes
invalid users = root
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:*
%n\n *password\supdated\ssuccessfully* .
pam password change = yes
map to guest = bad user
socket options = TCP_NODELAY
allow trusted domains = no
idmap backend = rid:ORA=10000-2000000
idmap uid = 10000-2000000
idmap gid = 10000-2000000
template shell = /bin/bash
template homedir = /home/%D/%U
winbind cache time = 0
winbind enum users = yes
winbind enum groups = yes
usershare allow guests = yes
[printers]
comment = All Printers
browseable = no
path = /var/spool/samba
printable = yes
guest ok = no
read only = yes
create mask = 0700
[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
browseable = yes
read only = yes
guest ok = no
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
