I'm trying to integrate a Linux machine into our Win2K3 ADS-based network. The machine must primarily serve as a user workstation (i.e., a Samba Client), although it also needs to serve at least one share for backup purposes. I'd like to emulate the behavior of our WinXP machines in that any user in our small company can login to any computer in the domain based on network username/password.
I've been following the information in the "Samba3-By Example" guide (the on-line, PDF version, 28 Jan 2008), section 7.3.4. I've had success joining the network and accessing a share on a server, but then run into a snag where getent doesn't return equivalent information to wbinfo for users and groups. I've done scads of web searching, reading, tinkering with conf files, and have scanned about six months of this list's archive without finding a resolution, although my problem doesn't seem to be uncommon. Before I post conf files with specifics I'd like to ask a couple of basic questions: 1) Need I care that getent won't return equivalent results as wbinfo? The guide describes this is "to validate the full identity resolution is functional as required", so I've been taking it as gospel that I shouldn't tackle PAM until getent works. 2) Active Directory Configuration: Is it a requirement that I either make configuration changes in AD or install Microsoft Services for UNIX to accomplish what I want? The By-Example guide seems to indicate that I don't have to (1st page of 7.3.4), but at least one write-up I've found on-line states that AD mods are necessary (<http://blog.scottlowe.org/2005/12/22/complete-linux-ad-authentication- details/> it is from Dec 2005, so could be out-of-date?). 3) My software versions are: * PDC and BDC are running Active Directory on Windows Server 2003 SP2 * Linux machine is running CentOS 5 with current updates * Samba software is 3.0.25b (supplied w/CentOS) * krb5 software is 1.6.1-17 (supplied w/CentOS) * nss is 3,11,7 (supplied w/CentOS) * nss_ldap is 253- 5 (supplied w/CentOS) Do I need to upgrade to newer versions? I've read of problems with Samba 3.0.23c on Red Hat, but nothing I've seen indicates a problem with 3.0.25b. If upgrading is recommended, I'd appreciate a pointer to an appropriate source of RPMs, as these are newest version in the CentOS Repositories, and I'm not too comfortable with building >From source yet. 4) If nsswitch.conf is configured for winbind, do I need to worry at all about LDAP configuration? 5) I've seen mention about letter case being a problem in configuring Kerberos and Samba. On our AD server, the domain appears as "DOMAIN.local", with the letter case as shown, so the FQDN of the server is SERVER.DOMAIN.local. Is this somehow causing me a problem? In the krb5.conf and smb5.conf files, I've identified the realm as DOMAIN.LOCAL. 6) One oddity: when I started working on this, after the machine joined the domain, wbinfo showed results as DOMAIN+username but somewhere along the line that change to just the username. Is that indicative of something I've misconfigured? Thanks for any insight. My gut tells me I'm not far off, but I've exceeded my "solve it myself" frustration level! Dave Lemire -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba