Re: [Samba] Solaris 10 winbind authentication with ADS

2011-01-12 Thread CJ Keist
Thanks for the replies. I got this resolved. It was case of my eyes not seeing what was in front of my face. The solaris upgrade DID replaced my /usr/lib/nss_winbind.so.1 link with Solaris's on library of same name. So I just had to rename that and recreate my link to the samba compiled

Re: [Samba] Solaris 10 winbind authentication with ADS

2011-01-07 Thread Michael Wood
Hi On 6 January 2011 01:11, CJ Keist cj.ke...@colostate.edu wrote: Well,     I did smart thing and upgraded my Solaris box to Solaris 10 update 9.  And now my winbind authentication has broken.  I have checked all my /usr/lib/*winbind* and /usr/lib/security/*winbind* libs and all are still

[Samba] Solaris 10 winbind authentication with ADS

2011-01-06 Thread CJ Keist
So, no one has a clue here? -- Well, I did smart thing and upgraded my Solaris box to Solaris 10 update 9. And now my winbind authentication has broken. I have checked all my /usr/lib/*winbind* and /usr/lib/security/*winbind* libs and all are still good

Re: [Samba] Solaris 10 winbind authentication with ADS

2011-01-06 Thread Gaiseric Vandal
I am guessing it also updated samba (unless you had previously patched samba.) Did you try backing up and deleting any TDB files relating to idmap or winbind and restarting samba? On 01/06/2011 03:49 PM, CJ Keist wrote: So, no one has a clue here? -- Well,

[Samba] Solaris 10 winbind authentication with ADS

2011-01-05 Thread CJ Keist
Well, I did smart thing and upgraded my Solaris box to Solaris 10 update 9. And now my winbind authentication has broken. I have checked all my /usr/lib/*winbind* and /usr/lib/security/*winbind* libs and all are still good from my last install. /etc/pam.conf, nsswitch.conf are still

Re: [Samba] solaris 10 winbind authentication with ADS

2010-12-28 Thread Volker Lendecke
On Mon, Dec 27, 2010 at 08:10:16AM -0700, CJ Keist wrote: Thank you. ./wbinfo -n login_name works. But the wbinfo -i doesn't work, Could not get info for user COLOSTATE\login. So windbind is working partially? Could there be something on the Windows domain controller that isn't allowing

Re: [Samba] solaris 10 winbind authentication with ADS

2010-12-27 Thread CJ Keist
Thank you. ./wbinfo -n login_name works. But the wbinfo -i doesn't work, Could not get info for user COLOSTATE\login. So windbind is working partially? Could there be something on the Windows domain controller that isn't allowing the information to my samba server? On 12/22/10 4:05

[Samba] solaris 10 winbind authentication with ADS

2010-12-27 Thread CJ Keist
Made some progress here. I saw from the log files that samba couldn't find the /opt/local/lib/idmap/rid.so module. So I added --with-shared-modules=idmap_rid to my configure options. That got the rid.so to get installed and now the getent passwd login works! But getent passwd by itself

Re: [Samba] solaris 10 winbind authentication with ADS

2010-12-22 Thread Volker Lendecke
On Tue, Dec 21, 2010 at 10:35:58AM -0700, CJ Keist wrote: getent passwd user_name or getent group group_name Try wbinfo -i user_name or wbinfo -i domain\\user_name That is a direct path without NSS intervention. This way you can reduce the problem to either winbind proper or nss problems.

[Samba] solaris 10 winbind authentication with ADS

2010-12-21 Thread CJ Keist
I'm trying to setup a Solaris 10 Sparc station to authenticate users on login with Windows ADS. I have found the documentation for this but having no luck in getting the pam modules to work. Here is what I have done so far: Compiling Kerberos MIT5-1.8.3: cd into the src directory

[Samba] solaris 10 winbind authentication with ADS

2010-12-21 Thread CJ Keist
Forgot to add, my nsswitch.conf file has the winbind option added to the end of the passwd and group lines: passwd: files winbind group: files winbind I'm trying to setup a Solaris 10 Sparc station to authenticate users on login with Windows ADS.

Re: [Samba] solaris 10 winbind authentication with ADS

2010-12-21 Thread Gaiseric Vandal
Is this to support authentication for unix users (e.g. via ssh) or windows users (via samba?) I found that after upgrading from samba 3.0.x to 3.4.x that the idmap allocation stopped working. In my case I already had the imdap entries populated into ldap. can you use wbinfo

Re: [Samba] solaris 10 winbind authentication with ADS

2010-12-21 Thread CJ Keist
I want to authenticate for ssh logins. I will not be running the smbd or nmbd daemons. Just winbind. running your commands I got: # ./wbinfo --allocate-uid Could not allocate a uid The second there is no --set-uid-mapping option. On 12/21/10 1:43 PM, Gaiseric Vandal wrote: Is this to