Re: [Samba] Samba 4.0.9 winbind isn't passing through uid and gid numbers from Win 2003 R2 -- SOLVED

2013-08-21 Thread Jason Michaelson
Thanks steve. Odd thing was, I actually had those in there, but they were before the domain specific lines. I added them after and it works beautifully! On Tue, Aug 20, 2013 at 4:42 PM, steve st...@steve-ss.com wrote: On Tue, 2013-08-20 at 16:31 -0500, Jason Michaelson wrote: idmap cache

Re: [Samba] Samba 4.0.9 winbind isn't passing through uid and gid numbers from Win 2003 R2

2013-08-20 Thread steve
On Tue, 2013-08-20 at 16:31 -0500, Jason Michaelson wrote: idmap cache time = 1800 idmap config FOUR-HORSEMEN:backend = ad idmap config FOUR-HORSEMEN:schema_mode = rfc2307 idmap config FOUR-HORSEMEN:default = yes idmap config FOUR-HORSEMEN:range = 1-2 idmap config

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-23 Thread Dr. Hansjörg Maurer
Hi Am 16.12.2012 23:06, schrieb Andrew Bartlett: On Sun, 2012-12-16 at 16:51 -0500, Thomas Simmons wrote: Hello Andrew, If functionality is not there, I certainly understand and can work around it. I just want to make sure I am not misunderstanding something. When you say I should set

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-23 Thread Andrew Bartlett
On Sun, 2012-12-23 at 14:40 +0100, Dr. Hansjörg Maurer wrote: Hi Am 16.12.2012 23:06, schrieb Andrew Bartlett: On Sun, 2012-12-16 at 16:51 -0500, Thomas Simmons wrote: Hello Andrew, If functionality is not there, I certainly understand and can work around it. I just want to make

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-23 Thread Dr. Hansjörg Maurer
Hi Andrew Please file a bug, so it isn't lost over the Christmas season, but clearly I need to change the code not to rely on posixAccount and posixGroup. The steps you performed are reasonable, and while we can improve our tool to add that objectClass, if AD isn't adding it using the standard

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-17 Thread Thomas Simmons
Hello, I was able to get back to the original (incorrect 4294967295) uids/gids on the 4.0 member with 'net cache flush'. I remove the 4.0 member from the domain, compiled 3.6.10 and re-joined. Unfortunately, that doesn't work either. I have no idea what to do at this point. 3.6.10 output

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-17 Thread Thomas Simmons
At least in the case of 3.6, it seems this is my problem: Error loading module '/usr/local/samba/lib/idmap/ad.so': /usr/local/samba/lib/idmap/ad.so: cannot open shared object file: No such file or directory Indeed, it does not exist: [root@ALW2 ~]# find /usr/local/samba/|grep ad.so

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-17 Thread Thomas Simmons
I got 3.6.10 working! I had to recompile with: --with-shared-modules=idmap_ad -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-17 Thread Thomas Simmons
After recompiling --with-shared-modules=idmap_ad, my S4 member also works. It made no difference on the DC. On Mon, Dec 17, 2012 at 11:19 AM, Thomas Simmons twsn...@gmail.com wrote: I got 3.6.10 working! I had to recompile with: --with-shared-modules=idmap_ad -- To unsubscribe from this

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-16 Thread TAKAHASHI Motonobu
From: Thomas Simmons twsn...@gmail.com Date: Sat, 15 Dec 2012 22:11:00 -0500 After provisioning a domain (with rfc2307 attributes), what are the next steps to enable S4 winbind to use these attributes? As far as I know, winbind on S4 DC cannot use this attribute. This setting affects only S4

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-16 Thread Thomas Simmons
Hello Takahashi, I am using ADUC to manage UNIX attributes and have created the attributes for each test user. Just to make sure I understand you correctly; you're saying there is no way to have S4 winbind use rfc2307 attributes for *nix authentication on a DC, but it will work on a member

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-16 Thread Andrew Bartlett
On Sun, 2012-12-16 at 12:23 -0500, Thomas Simmons wrote: Hello Takahashi, I am using ADUC to manage UNIX attributes and have created the attributes for each test user. Just to make sure I understand you correctly; you're saying there is no way to have S4 winbind use rfc2307 attributes for

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-16 Thread Thomas Simmons
Hello Andrew, If functionality is not there, I certainly understand and can work around it. I just want to make sure I am not misunderstanding something. When you say I should set idmap_ldb:use rfc2307=yes in smb.conf on the DC, do you mean that by doing so I can use winbind (and the rfc2307

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-16 Thread Andrew Bartlett
On Sun, 2012-12-16 at 16:51 -0500, Thomas Simmons wrote: Hello Andrew, If functionality is not there, I certainly understand and can work around it. I just want to make sure I am not misunderstanding something. When you say I should set idmap_ldb:use rfc2307=yes in smb.conf on the

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-16 Thread Thomas Simmons
I am using 'template homedir' and 'template shell' for these attributes, which I'm fine with. It's the uidNumber and gidNumber that I'm primarily concerned with. My global section: [global] workgroup = TESTDOM realm = internal.testdom.com netbios name = ADC1 server

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-16 Thread Thomas Simmons
acl:search = false is commented out there, but the behavior is the same either way. On Sun, Dec 16, 2012 at 5:30 PM, Thomas Simmons twsn...@gmail.com wrote: I am using 'template homedir' and 'template shell' for these attributes, which I'm fine with. It's the uidNumber and gidNumber that I'm

Re: [Samba] Samba 4, Winbind RFC2307

2012-12-16 Thread Thomas Simmons
I am seeing similar behavior on an S4 member server. In this case, every uid and gid is reported as 4294967295. As best I can tell, my smb.conf is ok. [root@ALW2 etc]# wbinfo -u administrator tuser1 tuser2 tuser3 krbtgt guest [root@ALW2 etc]# wbinfo -i tuser1 tuser1:*:4294967295:4294967295:Test

Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-14 Thread Greg
I was finally able to resolve these error messages. I was missing the winbind settings in /etc/nsswitch.conf: passwd: compat winbind group: compat winbind This is in addition to the settings that I had made to /etc/samba/smb.conf: idmap backend = tdb idmap alloc

Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-10 Thread Ryan Suarez
Greg wrote: [2009/12/08 16:41:48, 0] winbindd/idmap_tdb.c:341(idmap_tdb_alloc_init) idmap will be unable to map foreign SIDs: NT_STATUS_UNSUCCESSFUL Test a users SID to UID mapping: # /apps/samba/bin/wbinfo -n SOMEUSER S-1-5-21-3147950943-2271782263-395470419-4610 User (1) #

Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-10 Thread Greg
Test a users SID to UID mapping: # /apps/samba/bin/wbinfo -n SOMEUSER S-1-5-21-3147950943-2271782263-395470419-4610 User (1) # /apps/samba/bin/wbinfo -S S-1-5-21-3147950943-2271782263-395470419-4610 46318 That works fine. I'm using a local user name, it resolved the NT style SID which could then

Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-08 Thread Ryan Suarez
Hi Greg, Greg wrote: Hmmm. Well, I don't have any of the idmap settings in smb.conf so it would be whatever is default. I am using winbind just for the name resolution functionality. But is this a misconfiguration? What other settings are critical? Follow the winbind section:

Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-08 Thread Greg
I updated my smb.conf to include the following parameters: [global] idmap backend = tdb idmap alloc backend = tdb idmap uid = 1-11000 idmap gid = 1-11000 winbind enum users = yes winbind enum groups = yes This seems to have fixed some of the errors, but I still get the

Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-07 Thread Greg Carroll
I get these same sort of errors repeated in my log files. They are present when I start samba and everything seems to work fine. However, after some long period of time, I won't be able to connect to the samba shares from a client. If I restart samba (/etc/init.d/samba restart), these errors are

Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-07 Thread Greg
...@sheridanc.on.ca] Sent: Saturday, December 05, 2009 1:17 AM To: isk...@gmail.com Cc: samba@lists.samba.org Subject: Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full Greg wrote: I get these same sort of errors repeated in my log files. They are present when I start samba and everything

Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-05 Thread Ryan Suarez
Greg wrote: I get these same sort of errors repeated in my log files. They are present when I start samba and everything seems to work fine. However, after some long period of time, I won't be able to connect to the samba shares from a client. If I restart samba (/etc/init.d/samba restart),

Re: [Samba] Samba 3.4.2 Winbind problem IDMAP GID range full

2009-12-04 Thread Greg
I get these same sort of errors repeated in my log files. They are present when I start samba and everything seems to work fine. However, after some long period of time, I won't be able to connect to the samba shares from a client. If I restart samba (/etc/init.d/samba restart), these errors are

Re: [Samba] Samba 3.0.23d + winbind

2009-01-22 Thread orlandox
Hi, your active directory use Kerberos or LDAP, for authenticate the users?, if kerberos use: security = ads plus other configurations for kerberos support if ldap use security = domain password server = netbiosName or dnsName or hosts. No ip address, here not resolve that

Re: [Samba] Samba 3.0.23d + winbind

2009-01-22 Thread orlandox
Another test you may to do is: wbinfo -a username%password Another test, is debug the service winbindd, using --debuglevel=3 or other number , this output, should to write in a log file in your linux. With parameter -Si --debuglevel=3, print debug in stdout orlandox escribió: Hi, your

Re: [Samba] samba, ads, winbind and active directory

2008-05-28 Thread Jason Gerfen
That is correct. Some more information so that I might receive some help with this. I can perform the following commands without problem: wbinfo -t wbinfo -m wbinfo -g wbinfo -u wbinfo --krb5auth=user%password I am not able to do the following: getent group getent passwd net use x:

Re: [Samba] samba, ads, winbind and active directory

2008-05-27 Thread David Molina Cuevas
Do you not get any result for a 'getent passwd', and yes for 'wbinfo -u' ? I think I had the same problem before, I'll try to remember it. David Molina On Tue, May 27, 2008 at 3:25 PM, Jason Gerfen [EMAIL PROTECTED] wrote: I can enumerate users and groups from the domain but I cannot

Re: [Samba] Samba and winbind with LDAP IDMAP backend - user connects with Domain Admin permissions

2007-08-10 Thread simo
On Fri, 2007-08-10 at 09:40 -0700, Stang, Sharol wrote: [users] comment = user's home directory path = /mnt/cluster/home/users force group = Domain Admins So if you force _everybody_ to be Domain Admins why do you expect them not to be able to access

Re: [Samba] Samba with Winbind and PAM

2007-07-26 Thread samba . 20 . alclonky
06:29:17 -0500 Von: Gerald Jerry Carter - [EMAIL PROTECTED] [EMAIL PROTECTED] An: [EMAIL PROTECTED] CC: samba@lists.samba.org Betreff: Re: [Samba] Samba with Winbind and PAM (trusted: samba.org) -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: sry after reboot getent

Re: [Samba] Samba with Winbind and PAM

2007-07-26 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: sry after reboot getent passwd works but login doesn't i get an Authentication failed error I don't remember you mentioning any changes to /etc/pam.{d/*,conf}. cheers, jerry

Re: [Samba] Samba with Winbind and PAM

2007-07-25 Thread Volker Lendecke
On Wed, Jul 25, 2007 at 12:32:07PM +0200, [EMAIL PROTECTED] wrote: winbind enum users = no You explicitly denied to list users with getent passwd. Volker pgpF3sWPXgtWN.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] Samba with Winbind and PAM

2007-07-25 Thread samba . 20 . alclonky
winbind enum users = yes doesn't work either Original-Nachricht Datum: Wed, 25 Jul 2007 13:46:15 +0200 Von: Volker Lendecke - [EMAIL PROTECTED] [EMAIL PROTECTED] An: [EMAIL PROTECTED] CC: samba@lists.samba.org Betreff: Re: [Samba] Samba with Winbind and PAM (samba: message 4

Re: [Samba] Samba with Winbind and PAM

2007-07-25 Thread samba . 20 . alclonky
sry after reboot getent passwd works but login doesn't i get an Authentication failed error Original-Nachricht Datum: Wed, 25 Jul 2007 14:08:29 +0200 Von: [EMAIL PROTECTED] [EMAIL PROTECTED] An: samba@lists.samba.org Betreff: Re: [Samba] Samba with Winbind and PAM (samba

Re: [Samba] samba/PAM/winbind/ssh

2006-09-15 Thread Felipe Augusto van de Wiel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/12/2006 06:50 PM, Matt Herzog escreveu: I have the winbind login working on FC5 but now logins to local accounts cannot authenticate. My config files are here: http://www.pigeonnier.org/nsswitch.conf http://www.pigeonnier.org/pam.d/

Re: [Samba] samba/PAM/winbind/ssh

2006-09-15 Thread Matt Herzog
On Fri, Sep 15, 2006 at 11:42:12AM -0300, Felipe Augusto van de Wiel wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/12/2006 06:50 PM, Matt Herzog escreveu: I have the winbind login working on FC5 but now logins to local accounts cannot authenticate. My config files are

Re: [Samba] Samba 3.0.23 winbind use default domain = yes behaviour

2006-07-14 Thread Dietrich Streifert
Hi John, this is already filed as a bug: https://bugzilla.samba.org/show_bug.cgi?id=3920 and Jerry is working on it. I'v attached an inofficial not supported patch against relaease 3.0.23 of nsswitch/winbindd_group.c which reverted the change and worked for me. John schrieb: Hello list,

Re: [Samba] samba 4 winbind feature set

2006-03-17 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Greg Lehmann wrote: On Thu, 2006-03-16 at 20:35 -0500, Danilo Almeida wrote: On Thu, 2006-03-16 at 14:09 +1000, Greg Lehmann wrote: Hi All, Now that Microsoft have included the schema extensions (RFC 2307) for Unix in Active Directory with SP2

Re: [Samba] samba 4 winbind feature set

2006-03-16 Thread Andrew Bartlett
On Thu, 2006-03-16 at 14:09 +1000, Greg Lehmann wrote: Hi All, Now that Microsoft have included the schema extensions (RFC 2307) for Unix in Active Directory with SP2 for Windows Server 2003, there is some potential for both the samba 4 server side and client side (winbind) to use these

RE: [Samba] samba 4 winbind feature set

2006-03-16 Thread Danilo Almeida
On Thu, 2006-03-16 at 14:09 +1000, Greg Lehmann wrote: Hi All, Now that Microsoft have included the schema extensions (RFC 2307) for Unix in Active Directory with SP2 for Windows Server 2003, there is some potential for both the samba 4 server side and client side (winbind) to use these

RE: [Samba] samba 4 winbind feature set

2006-03-16 Thread Greg Lehmann
On Thu, 2006-03-16 at 20:35 -0500, Danilo Almeida wrote: On Thu, 2006-03-16 at 14:09 +1000, Greg Lehmann wrote: Hi All, Now that Microsoft have included the schema extensions (RFC 2307) for Unix in Active Directory with SP2 for Windows Server 2003, there is some potential for both the

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-24 Thread Thomas Limoncelli
It has crashed for me again -- this time unrelated to winbindd_cache.tdb processing as it seems, since it happened at runtime (during getent group somegroup, IIRC): [2006/02/24 14:10:39, 0] lib/util_sock.c:write_data(559) write_data: write failure. Error = Connection reset by peer

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-24 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Limoncelli wrote: It has crashed for me again -- this time unrelated to winbindd_cache.tdb processing as it seems, since it happened at runtime (during getent group somegroup, IIRC): I'm pretty sure this is now fixed in 3.0.21c which has

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-24 Thread Jeremy Allison
On Fri, Feb 24, 2006 at 04:38:49PM +0100, Thomas Limoncelli wrote: It has crashed for me again -- this time unrelated to winbindd_cache.tdb processing as it seems, since it happened at runtime (during getent group somegroup, IIRC): [2006/02/24 14:10:39, 0] lib/util_sock.c:write_data(559)

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-24 Thread Thomas Limoncelli
Gerald (Jerry) Carter wrote: Lars Müller wrote: On Wed, Feb 22, 2006 at 11:50:36AM +0100, Thomas Limoncelli wrote: Is there anything else I can do to help tracking this down? Run the upcoming 3.0.21c release as soon as it is out. [...] For what it's worth, the SAMBA_3_0_RELEASE is ready for

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-24 Thread Jeremy Allison
On Sat, Feb 25, 2006 at 12:35:07AM +0100, Thomas Limoncelli wrote: Gerald (Jerry) Carter wrote: Lars Müller wrote: On Wed, Feb 22, 2006 at 11:50:36AM +0100, Thomas Limoncelli wrote: Is there anything else I can do to help tracking this down? Run the upcoming 3.0.21c release as soon as it is

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-24 Thread Thomas Limoncelli
Jeremy Allison wrote: On Sat, Feb 25, 2006 at 12:35:07AM +0100, Thomas Limoncelli wrote: FWIW, 3.0.21c (binary RPMs for SuSE 9.3 Pro) still crashes upon startup when processing the very same winbindd_cache.tdb file. Jerry should have the file. I though you'd sent it to Jerry already. It

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-23 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Limoncelli wrote: Gerald (Jerry) Carter wrote: I still have the original (problematic) tdb file around, so I could easily verify if winbindd still crashes upon *reading* this file. Would you be interested? No. That's ok. I have a tool

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Thomas Limoncelli
Jeremy Allison wrote: On Wed, Feb 22, 2006 at 01:07:32AM +0100, Thomas Limoncelli wrote: I'm using Samba 3.0.21b on SuSE 9.3 Pro (x86) with the binary RPMs from samba.org/suse.com (3.0.21b-1.1.2-SUSE-SL9.3) on a Domain Member Server in ADS mode with winbind against W2K3 SP1 AD servers and

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Thomas Limoncelli
Thomas Limoncelli wrote: Unfortunately the backtrace doesn't look too meaningful (like in the original level 10 debug) although I've installed the samba-debuginfo package. myserver# gdb winbindd 24887 [...] (gdb) bt #0 0xe410 in ?? () strace reveals that winbind segfaults when reading

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 22 Feb 2006, Thomas Limoncelli wrote: At least, erasing winbindd_cache.tdb with tdbtool fixes the crashes for the moment. Sounds like and assert() firing in the caching code caused by a failure to open the winbindd_cache.tdb file. I doubt

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Thomas Limoncelli
Gerald (Jerry) Carter wrote: At least, erasing winbindd_cache.tdb with tdbtool fixes the crashes for the moment. Sounds like and assert() firing in the caching code caused by a failure to open the winbindd_cache.tdb file. I doubt there's anything else for you to do right now. But since

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Limoncelli wrote: Gerald (Jerry) Carter wrote: At least, erasing winbindd_cache.tdb with tdbtool fixes the crashes for the moment. Sounds like and assert() firing in the caching code caused by a failure to open the winbindd_cache.tdb

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Lars Müller
On Wed, Feb 22, 2006 at 11:50:36AM +0100, Thomas Limoncelli wrote: [snip] Is there anything else I can do to help tracking this down? Run the upcoming 3.0.21c release as soon as it is out. Shall I file a bugzilla entry and assign to the SuSE package maintainer? Please as soon as you have the

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Lars Müller wrote: On Wed, Feb 22, 2006 at 11:50:36AM +0100, Thomas Limoncelli wrote: [snip] Is there anything else I can do to help tracking this down? Run the upcoming 3.0.21c release as soon as it is out. Shall I file a bugzilla entry and

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Thomas Limoncelli
Gerald (Jerry) Carter wrote: But since winbindd from 3.0.21b was the only process ever maintaining this file, wouldn't this still make it a significant bug worth looking into? Yes. But the only real solution is to have winbindd remove the corrupted file automatically and reopen it. It's a

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Thomas Limoncelli
Gerald (Jerry) Carter wrote: Lars Müller wrote: On Wed, Feb 22, 2006 at 11:50:36AM +0100, Thomas Limoncelli wrote: Shall I file a bugzilla entry and assign to the SuSE package maintainer? Please as soon as you have the same problem again. See the details for bug reporting at

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Thomas Limoncelli wrote: I agree that this'd be a useful generic change to limit the *consequences* of any tdb cache file corruption (which winbindd should still avoid to contribute to in the first place, of course). Are you saying that we'll

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-22 Thread Thomas Limoncelli
Gerald (Jerry) Carter wrote: I still have the original (problematic) tdb file around, so I could easily verify if winbindd still crashes upon *reading* this file. Would you be interested? No. That's ok. I have a tool to corrupt tdbs for tests like this. :-) But then, given that tdbtool

Re: [Samba] Samba 3.0.21b winbind crash

2006-02-21 Thread Jeremy Allison
On Wed, Feb 22, 2006 at 01:07:32AM +0100, Thomas Limoncelli wrote: I'm using Samba 3.0.21b on SuSE 9.3 Pro (x86) with the binary RPMs from samba.org/suse.com (3.0.21b-1.1.2-SUSE-SL9.3) on a Domain Member Server in ADS mode with winbind against W2K3 SP1 AD servers and idmap uids/gids stored

Re: [Samba] samba-3.0.20a: winbind with disable netbios = yes?

2005-10-17 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christoph Badura wrote: Hello, I'm trying to use ntlm_auth and winbindd to authenticate users against a Windows 2003 AD server. Despite having disable netbios yes, winbindd insists on doing one NetBIOS exchange on UDP port 138 on startup. If I

RE: [Samba] Samba 3.0.20a Winbind Dead but subsys locked

2005-10-11 Thread Michael Andrewjeski
You've got a pid file somewhere that your start script is reading. Open the start script and find the location of the pid file then delete the file and start again. hth -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of PC Sent: Tuesday, October 11, 2005

Re: [Samba] samba-3.0.20rc1 winbind Windows 2003 SP1 ADS wbinfo all

2005-08-02 Thread Mike Rose
try setting 'passwd: files winbind' just for kicks. getent works fine for me. tried that, no luck, unfortunately. On Mon, 1 Aug 2005, Ryan Beckett wrote: I ran into this one as well. I had to set security = ADS and create an authorized user for winbind to use. # wbinfo -set-auth-user

Re: [Samba] samba-3.0.20rc1 winbind Windows 2003 SP1 ADS wbinfo all - Solved.

2005-08-02 Thread Mike Rose
In my smb.conf I had: winbind trusted domains only = yes Which worked with samba-3.0.9 to strip off the leading domain name for getent passwd so single UNIX and Windows sign on would work. I then told myself to RTM and: This now works with 3.0.20rc1: winbind use default domain = yes Many thanks

Re: [Samba] samba-3.0.20rc1 winbind Windows 2003 SP1 ADS wbinfo all fine, but getent passsd or group does not work...

2005-08-01 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike Rose wrote: | Hi, | | I've joined a Suse 9.1 Pro linux computer to a Windows 2003 SP1 ADS using: | # kinit [EMAIL PROTECTED] | # net ads join | | The computer account is created on the DC and wbinfo (-t -u -g) all | work. Then I try getent

Re: [Samba] samba 3.0.20pre1 winbind dumps core on Solaris 9

2005-06-27 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Robert M. Martel wrote: Greetings, I'm downloading a gdb package for Solaris right now so I don't have any information from the core file yet. Below is he rather short life story of my winbindd processes. ... [2005/06/27 08:51:58, 5]

Re: [Samba] samba pdc + winbind possible ?

2005-03-18 Thread Collen
Hmm, the problem is that my winbind ain't working on the same PDC server. it failt to authenticate users.. (think it's something with the secered key? although that might be strange, coz the PDC server is doing it's job fine..) and makeing the server join it's one domain, against it self ?? (net

Re: [Samba] samba pdc + winbind possible ?

2005-03-17 Thread Collen
Hmm, sorry tryed it, read the info. but pam_smbpass is only if you use the samba (textfile) passwd backend. so it's no good, if you have a mysql or other passdb backend.! but i found a solution, without using winbind! pam_smb_auth.so !! that did the trick.. only i downloaded the

Re: [Samba] samba pdc + winbind possible ?

2005-03-17 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Collen wrote: | Hmm, sorry tryed it, read the info. but pam_smbpass is only if you | use the samba (textfile) passwd backend. | so it's no good, if you have a mysql or other passdb backend.! | but i found a solution, without using winbind! | |

Re: [Samba] samba pdc + winbind possible ?

2005-03-16 Thread Collen
Hmm strainge problem occured.. i fired up winbind, and adjusted the pam files and all. but now i get plain-text authentication for user DOCENT returned NT_STATUS_ACCESS_DENIED (PAM: 4) and ofcoz' the login is denied !! what worries me is that, i'd got an imap http server running (on an other

Re: [Samba] samba pdc + winbind possible ?

2005-03-16 Thread Michael Gasch
the list mentions, that winbind should not run on a DC at all...why don't you use pam_ldap/pam_smbpass module? greez -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany -- To unsubscribe from this list go to

Re: [Samba] samba pdc + winbind possible ?

2005-03-16 Thread Collen
Hmm, does pam_smbpass only uses the smbpasswd text file, or does it uses the configed passwd backend (mysql) i just need a good way to authenticate ftp users against the samba users DB.. i don't use the passwd and shadow files for passwords to keep them out of other services on the server..

Re: [Samba] samba 3.08 winbind question

2004-11-09 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 sharif islam wrote: | Noticed this in /var/log/samba while I was applying 'getent | groups|grep groupname ' | [2004/11/09 10:29:04, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282) | No rid for Performance Monitor Users !? | [2004/11/09 10:29:04, 1]

Re: [Samba] Samba w/Winbind HA cluster

2004-07-02 Thread Pal Dorogi
Hi! I did it in the Sun box. Try this document: http://docs-pdf.sun.com/817-1533/817-1533.pdf (very clever) Pal [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 2004.07.01 15:30 To: [EMAIL PROTECTED] cc: [EMAIL PROTECTED] Subject:[Samba] Samba

Re: [Samba] Samba w/Winbind HA cluster

2004-07-01 Thread Marcin Przyczyna
On Thu, Jul 01, 2004 at 09:30:37AM -0400, [EMAIL PROTECTED] wrote: We are planning to build an HA cluster of samba servers, using winbind to authenticate against an Active Directory domain. The problem I see with this, is that the Winbind uid mappings will not necessarily be the same on both

Re: [Samba] Samba 2.2.8a - winbind do I need ACL for letting users change their file permissions?

2004-05-11 Thread Buchan Milne
On Tue, 11 May 2004, Stefano Ciccarelli wrote: Hi, I have a working installation of Samba 2.2.8a on Mandrake 9.2 - kernel 2.4.20 connected to a Win NT 4.0 sp6 via pam/winbind. IIRC, Mandrake 9.2 shipped with a 2.4.22 kernel? If you'vekep up with updates, you should be running

Re: [Samba] Samba and Winbind ?

2004-05-07 Thread Buchan Milne
On Thu, 6 May 2004, Talwar, Puneet (NIH/NIAID) wrote: I have a question about Samba and Winbind setup. I have successfully setup Samba, Winbind and Kerberos w/out any problems and I am even able to pull all the info from the AD user list running the wbinfo -u, and -g and the getent passwd as

RE: [Samba] Samba and Winbind ?

2004-05-06 Thread ww m-pubsyssamba
No, if you are using winbind you should not create a local user, you need to modify your pam.conf file (think this is correct for linux I have done it on Solaris) and this is documented in the samba how to guide which can be found on-line at samba.org or included with the source code, thanks

Re: [Samba] Samba 3, winbind, win2k AD: Kerberos question

2004-03-25 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sean Kennedy wrote: | My question is this: Is there a cleaner, more | fault tolerant method than this? I googled, and read about | dns srv records being used ( intead of hardcoding ), which I | understand win2k uses to begin with, but I don't know

Re: [Samba] Samba with winbind trouble

2003-11-21 Thread John H Terpstra
On Fri, 21 Nov 2003, LINDER Thierry wrote: Do you have an account in /etc/passwd called 'nobody'? - John T. Hello, I try to implement a samba server (2.2.7a) with the authentifiactions via winbind to a PDC W2000. When I test winbind, it works: [EMAIL PROTECTED] samba]# wbinfo -t

Re: [Samba] Samba 3.0.1pre1 winbind / getent problems

2003-11-07 Thread Buchan Milne
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Date: Wed, 5 Nov 2003 21:48:18 +0100 From: Thomas Sillard [EMAIL PROTECTED] Subject: [Samba] Samba 3.0.1pre1 winbind / getent problems To: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=us-ascii Hi, I've

Re: [Samba] Samba 3.0.1pre1 winbind / getent problems

2003-11-07 Thread Thomas SILLARD
Selon Buchan Milne [EMAIL PROTECTED]: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Date: Wed, 5 Nov 2003 21:48:18 +0100 From: Thomas Sillard [EMAIL PROTECTED] Subject: [Samba] Samba 3.0.1pre1 winbind / getent problems To: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED]

RE: [Samba] Samba 3.0.1pre1 winbind / getent problems

2003-11-06 Thread Thomas SILLARD
Selon Ron Smith [EMAIL PROTECTED]: When i try a getent passwd or getent group, i don't have the windows users. I can't see or connect to the shares on the linux box with windows Try this, then restart winbind and check getent again: ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2

RE: [Samba] Samba 3.0.1pre1 winbind / getent problems

2003-11-05 Thread Ron Smith
When i try a getent passwd or getent group, i don't have the windows users. I can't see or connect to the shares on the linux box with windows Try this, then restart winbind and check getent again: ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2 ldconfig obey pam restrictions =

Re: [Samba] Samba 3beta3 - Winbind and groups in groups - question

2003-08-19 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 19 Aug 2003, [iso-8859-2] £ukasz Sznajder wrote: Members of group_a are user_0, user_1, user_2 Members of group_b are user_3, user_4, user_5 Members of group_c are user_6 and group_b If i try to do getent group At my linux box i got

RE: [Samba] Samba 3beta3 - Winbind and groups in groups - question

2003-08-19 Thread ukasz Sznajder
We don't unroll nested groups IIRC. Not on the plate for 3.0. Sorry. Ok. It makes my project little harder, but do You know if - can I find something in cvs HEAD? - where I can find any API if I want to try to add it - as dirty but working hack? -- To unsubscribe from this list go to the

RE: [Samba] Samba 3beta3 - Winbind and groups in groups - question

2003-08-19 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 19 Aug 2003, [iso-8859-2] £ukasz Sznajder wrote: We don't unroll nested groups IIRC. Not on the plate for 3.0. Sorry. Ok. It makes my project little harder, but do You know if - can I find something in cvs HEAD? - where I can find any

RE: [Samba] samba and winbind issues

2002-10-28 Thread Wieprecht, Karen M.
: RE: [Samba] samba and winbind issues Thanks for the email. I finally got samba to work but now I am having issues with groups. When I do a groups jfountain, i get domain admins but no other groups. when i do a groups user1, i get nothing - and the user is in a couple groups. Any thoughts

RE: [Samba] samba and winbind issues

2002-10-28 Thread Jennifer Fountain
-g i get them all. I have AD in mixed mode if that helps. Thanks! -Original Message- From: Wieprecht, Karen M. [mailto:Karen.Wieprecht;jhuapl.edu] Sent: Monday, October 28, 2002 11:13 AM To: 'Jennifer Fountain'; '[EMAIL PROTECTED]' Subject: RE: [Samba] samba and winbind issues Are you

RE: [Samba] samba and winbind issues

2002-10-28 Thread Wieprecht, Karen M.
Sorry, I don't know any more, hopefully one of the samba gurus might have an explanation for the behavior. Karen Wieprecht -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] samba and winbind issues

2002-10-28 Thread Jennifer Fountain
Thanks for your help though! :) -Original Message- From: Wieprecht, Karen M. [mailto:Karen.Wieprecht;jhuapl.edu] Sent: Monday, October 28, 2002 1:19 PM To: 'Jennifer Fountain'; '[EMAIL PROTECTED]' Subject: RE: [Samba] samba and winbind issues Sorry, I don't know any more, hopefully

RE: [Samba] samba and winbind issues

2002-10-24 Thread Wieprecht, Karen M.
1. Run ~samba/bin/wbinfo -u and make sure you are actually talking to your domain controller 2. Do you have winbind entries in your nsswitch.conf file? Have you made your system re-read this info (the command is nsadmin restart on irix, don't know about other platforms). 3. The windows box