Hi,
I am attempting to use Samba 3.0.2a on RedHat 9.0 with winbindd to
authenticate accounts in an NT 4.0 domain to a samba member server with the
below configuration:
The samba configuration file is as follows:
[global]
workgroup = Domainname
netbios name = SBX-SM
server string = Samba Server
interfaces = 170.164.254.4/26
bind interfaces only = Yes
security = DOMAIN
obey pam restrictions = Yes
password server = XXX-PDC XXX-BDC
smb passwd file = /etc/samba/smbdomainname
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
unix password sync = Yes
log file = /var/log/samba/%m.log
max log size = 0
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = No
dns proxy = No
wins server = 170.164.34.68
lock directory = /var/cache/samba/domainname
pid directory = /var/log/samba/domainname
socket address = 170.164.254.4/26
idmap uid = 1-20001
idmap gid = 1-20001
winbind separator = +
[homes]
comment = Home Directories
valid users = %S
read only = No
create mask = 0664
directory mask = 0775
include = /etc/samba/conf/shares.conf
[public]
comment = Public Stuff
path = /home/public
read only = No
Pam files configured as follows:
System-auth file:
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
authrequired /lib/security/pam_env.so
# The two lines below added for winbindd configuration
authsufficient/lib/security/pam_winbind.so
authsufficient/lib/security/pam_unix.so likeauth nullok
use_first_pass
authrequired /lib/security/pam_deny.so
account required /lib/security/pam_unix.so
passwordrequired /lib/security/pam_cracklib.so retry=3 type=
passwordsufficient/lib/security/pam_unix.so nullok use_authtok md5
shadow
passwordrequired /lib/security/pam_deny.so
# Add the below line before any session line - for winbindd
session required /lib/security/pam_mkhomedir.so skel=/etc/skel/
umask=0022
session required /lib/security/pam_limits.so
session required /lib/security/pam_unix.so
Login File:
#%PAM-1.0
auth required /lib/security/pam_securetty.so
auth required /lib/security/pam_nologin.so
auth sufficient /lib/security/pam_winbind.so
auth required /lib/security/pam_pwdb.so use_first_pass shadow
nullok
accountrequired /lib/security/pam_winbind.so
I made sure that 'smbd' and 'nmbd' were stopped, created the machine account
through NT, and then ran 'net rpc join -w Domainname -s
/etc/samba/configfile.conf -U administrator' and received 'Joined Domain'
message. I then started these services.
Both getent passwd and getent group appear to pull correct information.
However, when I try to access the server, either through server manager, or
\\servername file:///\\servername , I receive the below error:
Configuration could not be read form the domain controller, either because
the machine is unavailable, or access has been denied.
chown also returns 'invalid user: Domain+username'
The nscd daemon is stopped.
I have RTFM'ed and have viewed similar issues on this and other newslists.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
