I have Samba 4.6.6 running as an ADDC and all is working great. I have a
Samba 3.6.9 File Server that I want to join to the domain. I have gone
through the steps but am having issues.
In my smb.conf file I have added the following
realm = my.domain
security = ads
encrypt passwords = yes
I edited my Kerberos file
[libdefaults]
default_realm = MY.DOMAIN
dns_lookup_kdc = true
[realms]
ZAKRAISEK.COM = {
kdc = server.my.domain
}
[domain_realms]
.kerberos.server = MY.DOMAIN
I installed winbind and edited my nsswitch.conf to add winbind options.
The book that I went off to set this up says to use the idmap uid and idmap
gid options, but to my knowledge these were deprecated a while ago so I did
not include them.
I did net join -U administrator, and it joined fine. If I look in Active
Directory Users and Computers, I can see a computer account created for the
Linux machine.
I ran net ads testjoin, all is good here, no errors
I ran wbinfo -p, all is good here, no errors
I ran wbinfo -t, all is good here, no errors
lastly I ran wbinfo -a "MY.DOMAIN\user", typed the password, and everything
worked successfully
The samba book I'm using then says to run getent passwd "My.DOMAIN\user"
Here is where the error is. I can not seem to get any domain accounts to
work with this command. If I run getent passwd by itself, it displays a
list of all my local accounts on the machine, but no domain ones. Did I
miss a step
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
