Hi;
wbinfo can not get the user names and group names of my AD domain (Windows 2008
SP2)
The result for wbinfo -t is ok :
checking the trust secret for domain P9BIS via RPC calls succeeded
But when i try to get wbinfo -n USER1 or wbinfo -r USER1 it shows this
error message: Could not lookup
Samba Team,
I have posted this issue before but it seems to have gotten lost in the
storm.
I have several Linux servers set up to authenticate users using AD
credentials.
The one server that actually works right is running Samba 3.2.7. The
presence of RFC2307 attributes in the user object, in
Hi!
I have a problem with winbind. it has been configured and all working fine
until one day gencache.tdb got corrupted. I had to delete it and join the
domain again with 'net ads join -U admin'. And voila, people can connect
against the AD.
But since that day, from time to time I had to stop
Hello
I have two similar servers, both are Debian Etch (fully updated). Both
work as PDC with samba 3.0.24-6etch9. Both have squid proxy working and I
am using winbind to authenticate my proxy users.
Couple of days ago I've encountered a problem with authorization on one of
my servers. I realized
Everyone,
Here is a challenge for all of you samba experts! Lately I
have been seeing a problem where winbind is not correctly identifying a user as
a member of a group he most certainly belong to. This is with a Domain Local
group so I know samba should support it.
/Location
*From:* Scott Lovenberg [mailto:[EMAIL PROTECTED]
*Sent:* Tuesday, February 12, 2008 9:27 PM
*To:* Trimble, Ronald D
*Cc:* samba@lists.samba.org
*Subject:* Re: [Samba] Problem with winbind not seeing a user as part
of a group
Trimble, Ronald D wrote:
It looks like
: [Samba] Problem with winbind not seeing a user as part of a group
Trimble, Ronald D wrote:
I have never explored those options. We have auth fall through turned off. If
the authentication fails, they get a 401 message indicating they don't have
permissions.
Here is an example from our
]
Sent: Tuesday, February 12, 2008 9:27 PM
To: Trimble, Ronald D
Cc: samba@lists.samba.org
Subject: Re: [Samba] Problem with winbind not seeing a user as part of a group
Trimble, Ronald D wrote:
It looks like it is only happening when apache2 is involved. Although, other
login methods are far
@lists.samba.org
Subject: Re: [Samba] Problem with winbind not seeing a user as part of a group
Trimble, Ronald D wrote:
Everyone,
Here is a challenge for all of you samba experts! Lately I
have been seeing a problem where winbind is not correctly identifying a user as
a member
] Problem with winbind not seeing a user as part of a group
Trimble, Ronald D wrote:
Everyone,
Here is a challenge for all of you samba experts! Lately I
have been seeing a problem where winbind is not correctly identifying a user
as a member of a group he most certainly
Trimble, Ronald D wrote:
Everyone,
Here is a challenge for all of you samba experts! Lately I
have been seeing a problem where winbind is not correctly identifying a user as
a member of a group he most certainly belong to. This is with a Domain Local
group so I know samba
Hi,
On the Debian Linux server, followings had been istalled since May,
2006. Group1 users on Windows 2003 AD are able to access the share e.g.
share1. I added a new share, share2 for group2 users, but none of user
from group2 can access the new share. They always prompted for
password.
Hello everyone!
I have samba-3.0.10-1.4E.6 under CentOS 4.3 and have such a kind of problem
with winbind:
when i am adding one of the Windows users to group those changes are not
visible on Linux box.
For example, i've add user 'vic' to group Webmasters under Windows. I wait
for 24 hours and after
Hi,
Since 1 month, I tried without any success to configure Samba.
My problem is that winbind crashes when I list users and groups. And I
think that it is linked to my trusted domains (wbinfo -domain=myADdomain
-u works well).
The error is the following :
[2006/07/11 14:30:29, 3]
Hello,
I have a debian server with samba and winbind 3.0.14a.
This server was joined to a windows domain. (PDC Windows NT4)
When I try to get windows users with wbinfo -u,
I have this error : Error looking up domain users.
smb.conf file :
[global]
workgroup = domaine
security = DOMAIN
netbios
Hello,
I just rebuilt the samba server that I was working on and when I try to add the
line winbind separator = \, testparm tells me that its value must be 1
character and then displays its value as the proceeding line. If I change the
value to '+', it tells me that the value might cause a
Guillermo Gutierrez wrote:
I just rebuilt the samba server that I was working on and when I try to add the line winbind separator = \, testparm tells me that its value must be 1 character and then displays its value as the proceeding line.
This is the default value, so you may just omit the
I had no luck with \ too. I ended up going back to using +
David
David Shapiro
Unix Team Lead
919-765-2011
Thomas Limoncelli [EMAIL PROTECTED] 3/3/2006 9:10 AM
Guillermo Gutierrez wrote:
I just rebuilt the samba server that I was working on and when I try
to add the line winbind
well, I am trying it without the line, I will let you all knowhow it worked.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of David Shapiro
Sent: Friday, March 03, 2006 6:22 AM
To: samba@lists.samba.org; Thomas Limoncelli
Subject: Re: [Samba] problem
, March 03, 2006 9:25 AM
To: David Shapiro; samba@lists.samba.org; Thomas Limoncelli
Subject: RE: [Samba] problem with winbind separator = \
well, I am trying it without the line, I will let you all knowhow it
worked.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED
Hello,
When I log in with ssh and type the command id on aix system, I get
just a little information:
uid=10(mylogin) gid=10(domain users)
If I login in as a local unix account and su to mylogin, id shows me a
lot more information:
uid=10(u785755) gid=10(domain users)
When winbind is configured without the 'winbind nss info =' statement
(i.e. such that winbind maintains its own local map of SIDs - UID/GIDs),
the following works fine:
# cd ~detertj
# getent passwd detertj
detertj:x:10008:1:detertj:/home/MSOE/detertj:/bin/bash
but
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, 7 Dec 2005, Security Officer wrote:
Hello again, I have been testing Samba 3.0.21rc2 with Windows ADS support
on SPARC/Solaris 8 and 9 and am experiencing problems with winbind for
nsswitch.
Firstly, can anyone confirm this
Hello again, I have been testing Samba 3.0.21rc2 with Windows ADS support
on SPARC/Solaris 8 and 9 and am experiencing problems with winbind for
nsswitch.
Firstly, can anyone confirm this configuration this works at all?
Secondly, how did you get it to work?
I am aware of various difficulties
Hi,
I have some error into my log.winbind and I can't
understand why.
[2005/10/03 16:38:28, 2]
nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(654)
NTLM CRAP authentication for user [D-CH-CAI3]\[]
returned
NT_STATUS_NO_SUCH_US
ER (PAM: 4)
[2005/10/03 16:38:38, 2]
Hi,
I'm using winbind to authenticate squid proxy users via ntlm_auth.
Squid, samba and winbind run on the same server.
The server is PDC and a member of the domain.
After update samba from 3.0.14a up to 3.0.20 ntlm_auth does not work.
Also wbinfo got error:
# wbinfo -t
checking the trust secret
I have a problem with winbind and pam that I just can't quite get past.
Here is what I have:
I have a home office with a Windows 2000 active directory domain (domain
XYZ). I have a remote office running Samba 3.0.14a connected to the
home office via a VPN. All users at the remote office are
Sun PCNetlink is a NT4.0 PDC emulator.
I'm running samba-3.0.13, joined to an ADS server that has a trust with a
PCNetlink domain. My samba can authenticate fine against ADS accounts, but
refuses to authenticate against the PCNetlink domain. I can do
getent passwd ADSDOM\user
and get an ADS
We could not authenticate from a Windws NT domain using Samba 3.0.10-1.4E.
It was because winbind would not work properly. The fix was to copy
winbindd from Samba 3.0.8-0.pre1.3 and voila!
Tom Naves
System Administrator
Orthodyne Electronics
--
To unsubscribe from this list go to the
Hi!
Since we migrated to Fedora Core 3 our Linux box where we run Squid, wich,
in turn, uses Samba´s winbind to do ntlm authentication, we are experiencing
a weird behavior in this authentication, wich I think relates to winbind.
We are running samba-3.0.8-0.pre1.3, and Squid is randomly
We have Samba 3.0-6 (compiled from source) running as a Domain Member
on Sun Solaris9. Samba should operate as a file-server only.
The server exports the same directories that should be made available
to windows clients via NFS. Therefor we need UNIX owner and groups on
the files and directories.
I am with a problem to configure the authentication of user through
winbind. The command wbinfo -u returns the following list:
ECP+luis
ECP+alda
ECP+jefferson
ECP+wedila
ECP+root
ECP+luana
ECP+Administrador
ECP+Convidado
ECP+TsInternetUser
ECP+NetShowServices
ECP+IUSR_SENEGAL
ECP+IWAM_SENEGAL
I think what you are looking for is:
winbind use default domain = yes
Then your users should be able to login with just their user names
without the ECP+
On Mon, 23 Aug 2004 18:00:29 -0300, Luis Henrique de Faria Guimaraes
[EMAIL PROTECTED] wrote:
This windows 2000 is the PDC's users. I
Hi Jerry,
| The Domaincontroller is a Samba 3.0.2 on a Redhat 7.3 machine.
you either have to (a) upgrade the DC to 3.0.4 as well, or (b)
set 'client schannel = no' in the domain member's smb.conf as a
temporary workaround.
Thanks, I already upgraded the DC to 3.0.4. That solved the problem for
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Klaus Steinberger wrote:
| I get the following problem with winbind from samba 3.0.3 as
| well as 3.0.4:
|
| [EMAIL PROTECTED] root]# wbinfo -u
| Error looking up domain users
| [EMAIL PROTECTED] root]#
|
| From /var/log/messages:
|
| Jun 24 16:02:23
Hello,
I get the following problem with winbind from samba 3.0.3 as well as 3.0.4:
[EMAIL PROTECTED] root]# wbinfo -u
Error looking up domain users
[EMAIL PROTECTED] root]#
From /var/log/messages:
Jun 24 16:02:23 bagheera winbind: winbindd startup succeeded
Jun 24 16:02:23 bagheera winbindd[28278
Hello,
I'm having some problems using winbind on Samba 3.0.1 with /etc/nsswitch.conf on a
Solaris 8 server. The Solaris 8 release is 10/00.
The basic problem that I have is that there are restrictions on what nsswitch.conf can
contain if password ageing is used.
My setup is that users
Am Mo, 2003-11-10 um 11.02 schrieb Tilo Lutz:
I've set up winbind with Suse 9.0 and Samba 3.0.1
Everything i working fine exepct pam configuration
How can I use pam_winbind and pam_unix2 ?
auth sufficient pam_winbind.so
auth required pam_unix2.souse_first_pass
Hi
I'Ve set up winbind with Suse 9.0 and Samba 3.0.1
Everything i working fine exepct pam configuration
How can I use pam_winbind and pam_unix2 ?
auth sufficient pam_winbind.so
auth required pam_unix2.souse_first_pass null_ok
unix-users can login with correct password.
Hi all,
i've problem with the authentication via winbind on a Windows NT PDC.
Environment:
Samba Server:
z800
Linux SLES8 as VM guest on one LPAR
SAMBA 3.0 alpha23
PDC:
Windows NT 4.0 SP 6a
The samba Server is member of the domain, i can check the secret with net
rpc testjoin and wbinfo -t.
I'm trying to get winbind working, so my Linux machines can authenticate
users from the local NT domain. I've used the docs at
http://us2.samba.org/samba/ftp/cvs_current/docs/htmldocs/winbind.html as
well as http://www.sin.khk.be/~dj/ and
http://www.mandrakeuser.org/docs/connect/csamba5.html to
]]
Sent: Tuesday, January 07, 2003 3:15 AM
To: Jennifer Fountain
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] Problem with Winbind and groups
On Mon, 6 Jan 2003, Jennifer Fountain wrote:
./wbinfo -g - i get a listing of all my domain groups
./wbinfo -r jfountain - i get all the groups gid
On Mon, 6 Jan 2003, Jennifer Fountain wrote:
./wbinfo -g - i get a listing of all my domain groups
./wbinfo -r jfountain - i get all the groups gid
but if i type
groups jfountain
i only get domain admins
nsswitch.conf
passwd: files winbind
group: files winbind
Looks OK.
samba
This is the right list. I'm having similar problems with getent not
working properly. Wbinfo -u / -g / -a work, but getent stopped showing
anything but local users, though it USED to work. I wonder if it has
anything to do with the upgrade to the errata glibc which provides
getent? Or it could
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, 4 Dec 2002 [EMAIL PROTECTED] wrote:
So... it looks like my system is communicating with the NT PDC. But...
if I try these commands:
getent passwd
getent group
I only see the local users and groups listed, respectively.
Make sure
Something more than that Jerry, the symlink is there :(.
$ ls -l /lib/libnss_winbind*
-rwxr-xr-x1 root root18727 Nov 21 11:45
/lib/libnss_winbind.so
lrwxrwxrwx1 root root 22 Nov 21 12:25
/lib/libnss_winbind.so.2 - /lib/libnss_winbind.so
Stab in the dark, does
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, 4 Dec 2002 [EMAIL PROTECTED] wrote:
Stab in the dark, does this look right?
$ ldd `which getent`
libc.so.6 = /lib/libc.so.6 (0x40024000)
/lib/ld.so.1 = /lib/ld.so.1 (0x4000)
Looks fine. What are the values for
The 0xc233 is most likely because a trusted domain controller
is not reachable. run the command
wbinfo -m
to see the list of domains that are trusted. I'll bet you will not
see a listing of any groups or users from one of those.
[EMAIL PROTECTED] wrote:
Something more than that Jerry,
Thanks! wbinfo -m returned 3 domains, none of which I should be
concerned with :), so that sets my mind at ease.
Oddly enough, wbinfo -u returns the users in 1 of the 3 domains, but not
the other 2. Wonder if they misconfigured?
~ Daniel
From: Herb Lewis
The 0xc233 is most likely
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, 4 Dec 2002 [EMAIL PROTECTED] wrote:
Thanks! wbinfo -m returned 3 domains, none of which I should be
concerned with :), so that sets my mind at ease.
Oddly enough, wbinfo -u returns the users in 1 of the 3 domains, but not
the other 2.
Looks fine. What are the values for winbind enum user and winbind
enum
group? What happens when you run `strace getent passwd`?
Argh. Of course it would be the simplest answer, winbind enum user and
winbind enum group were set to No after reading On large installations
it may be necessary
One more thing... After I fixed the symlink to it had the right name
(libnss_winbind.so.2 instead of libnss_winbind.2) wbinfo broke. Now, I
can't get users, groups or verify plaintext authentication. An strace
of wbinfo -u also gives me the same thing that getent did. The file
'pipe' is
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Wed, 4 Dec 2002, George Lenzer wrote:
One more thing... After I fixed the symlink to it had the right name
(libnss_winbind.so.2 instead of libnss_winbind.2) wbinfo broke. Now, I
can't get users, groups or verify plaintext authentication. An
winbind enum users = yes
winbind enum groups = yes
Is the way it should be. You are fine in that respect.
Did you restart winbind after fixing the symlinks? It might help.
snip
lstat64(/tmp/.winbindd, {st_mode=S_IFDIR|0755, st_size=4096, ...}) =
0
lstat64(/tmp/.winbindd/pipe, 0xb430)
I'm running a RedHat 8.0 system. Pretty much stock. But I uninstalled
the version of samba, samba-common and samba-client that came with it.
Instead I downloaded a tarball from samba.org. I have just finished
compiling and installing samba 2.2.7 using the --with-pam
--with-smbmount
I login and autenticate to a win2000. but when I start wbinfo -t this
says cold not check secret. What is this?
Thanks
wilson
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Hello all,
I installed Mandrake Linux 8.2 on the servers of my company and on my
workstation and i am enjoying it very much, but now i want to install it on
some employers workstations. Some of the users liked Mandrake 9.0 very much,
but the only problem to them is to mount the windows shares,
Hello
list,
I've installed
successfully samba 2.2.4 (binary) and the samba server (solaris 2.6) oitozx
could join the W2K-domain HELIOS.
wbinfo -t shows secret is
good.
But I can't retrieve
the list of domain users or groups. wbinfo -u shows following
error:
Error looking up
domain
files on the share.
Any other ideas?
-Original Message-
From: eng yeow cheu [mailto:[EMAIL PROTECTED]]
Sent: 25 May 2002 18:25
To: Matt Butt
Subject: Re: [Samba] Problem with winbind in Win2k domain
check your passwd and smbpasswd. Make sure you have
the account.
--- Matt Butt [EMAIL
that might be worth putting
in the Winbind documentation. Where should I send this info?
-Original Message-
From: Matt Butt
Sent: 26 May 2002 11:10
To: [EMAIL PROTECTED]
Cc: eng yeow cheu
Subject: RE: [Samba] Problem with winbind in Win2k domain
Thanks for the reply.
I thought the whole
I've been trying to setup a Samba file server on our Win2k domain that
will use the users/groups from Win2k using Winbind.
I have been quite successful so far but have come up against a problem.
This is what I've done so far:
- Download 2.2.4, compiled and installed fine
-
61 matches
Mail list logo
