Re: [SLUG] winbind and samba (solution)
I managed to fix the problem and thought I'd post it here as a reference for the next poor sod who needs to do this. The problem was two fold: 1) don't use + as a domain seperator as it can cause problems with samba resolving domain groups. (good 'ole testparm told me so) 2) domain groups are case sensitive (duh !) When referencing domain groups in samba be sure to enclose the group in double quotes if the group name includes spaces eg. @DOMAIN\Domain Users I love google groups and especially comp.protocols.smb ! :-) -- Rgds, Chris MacKenzie Either one of us, by himself, is expendable. Both of us are not. -- Kirk, The Devil in the Dark, stardate 3196.1 -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
[SLUG] winbind and samba
Title: Message Hi All, I'm experiencing problems with getting winbind to resolve groups from our windows 2000 domain controllers, and was hoping that some one here might be able to shed some light on what I'm doing wrong. I'm running samba v2.2.7 on red hat v8.0 and I have so far only managed to get user accounts to resolve but when I attempt to resolve groups, all I get is the gid number. eg. [EMAIL PROTECTED] samba]# wbinfo -r TESTDOMAIN+cmackenzie100011000210003100041000511000610007 I've included extracts of the relevant config files below. any help would be appreciated as well as reducing my panadol intake :-) /etc/samba/smb.conf [global] workgroup = TESTDOMAIN security = domain password server = * encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd pam password change = yes username map = /etc/samba/smbusers obey pam restrictions = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = no domain master = no preferred master = no wins server = 172.25.240.13 153.107.14.99 dns proxy = no ## WINBIND CONFIGURATION HEREwinbind separator = +winbind uid = 1-2winbind gid = 1-2winbind enum users = yeswinbind enum groups = yestemplate shell = /bin/false # Share Definitions == [stuff]comment = Docspath=/mnt/data/stuffguest ok = nopublic = novalid users = TESTDOMAIN+cmackenzie writable = yescreate mode = 0664directory mode = 0775 [test]comment = Permission Testpath=/mnt/data/testguest ok = nopublic = yeswrite list = @'TESTDOMAIN+Domain Users'writable = yescreate mode = 0664directory mode = 0775 # /etc/pam.d/samba #%PAM-1.0auth requiredpam_nologin.soauth requiredpam_stack.so service=system-authauth sufficentpam_winbind.so account requiredpam_stack.so service=system-authaccount requiredpam_winbind.so service=system-auth session requiredpam_stack.so service=system-authpassword requiredpam_stack.so service=system-auth # /etc/nsswitch.conf passwd: files nisplus winbind shadow: files nisplus winbindgroup: files nisplus winbind --- Rgds, Chris MacKenzie **This message is intended for the addressee named and may containprivileged information or confidential information or both. If youare not the intended recipient please delete it and notify the sender.**
[SLUG] winbind and samba
Title: winbind and samba I download all the instuctions from the web how to configure winbind to work with samba, and I am planning to do it. just before I do it, I want to know is it hard to configure or triky , or any thing I need to watch for ? thanks xiaolu
