Re: [Samba] SAMBA + KERBEROS + AD

[Oliver Henriot]

I forgot to mention, after creating the symlink from libnss_winbind.so.2 to libnss_winbind.so, copying libnss_winbind.so.2 as libnss_winbind.so in /lib, or compiling Samba and copying the compiled libnss_winbind.so into /lib, when I run ldconfig -v, I only get :

   # ldconfig -v|grep libnss_winb
   ldconfig:     libnss_winbind.so.2 -> libnss_winbind.so.2



Cheers,


Oliver Henriot a écrit, le 07.03.2008 09:17 :

No mention whatsoever of libnss_winbind.so, that seems strange doesn't it? What am I doing wrong?

Hi,


However, I have installed samba using Debian packages with aptitude.
All I have is :

   # find / -name libnss_winb*
   /lib/libnss_winbind.so.2
   # ls -l /lib/libnss_winbind.so*
   -rw-r--r-- 1 root root 15700 2007-12-10 12:47 /lib/libnss_winbind.so.2







Cheers,



Dans sa grande sagesse, ciro samba a écrit, le 07.03.2008 03:51 :

I have the same problem as Hélio : getent passwd only returns local users when wbinfo -u returns domain users. I have tried changing permissions on libnss_winbind.so.2 to 775 and adding a /lib/libnss_winbind.so symlink to /lib/libnss_winbind.so.2, all to no avail. The .deb archive in the current stable Debian does not contain libnss_winbind.so, only libnss_winbind.so.2. I have tried compiling Samba from sources and copying the resulting libnss_winbind.so to /lib but I still only get local accounts when I run getent passwd and getent group. Is the solution to install the version compiled from sources? Is there no way to get the version packaged for the distribution to work? P.S. I hope my intrusion in Hélio's thread will help both of us to progress

Helio,
have you tested nsswitch with
`getent passwd`
should return

root:x:0:0::/root:/bin/bash
bin:x:1:1:bin:/bin:/bin/false
daemon:x:2:2:daemon:/sbin:/bin/false
adm:x:3:4:adm:/var/log:/bin/false
lp:x:4:7:lp:/var/spool/lpd:/bin/false
sync:x:5:0:sync:/sbin:/bin/sync
... etc
gdm:x:42:42:GDM:/var/state/gdm:/bin/bash
apache:x:80:80:User for Apache:/srv/httpd:/bin/false
messagebus:x:81:81:User for D-BUS:/var/run/dbus:/bin/false
haldaemon:x:82:82:User for HAL:/var/run/hald:/bin/false
pop:x:90:90:POP:/:/bin/false
nobody:x:99:99:nobody:/:/bin/false

EDITORA\guest:*:10001:10001:Guest:/home/EDITORA/guest:/bin/false
etc..;

you have in your smb.conf
if getent does not return domain users at all but wbinfo -u does, the
problems is with libnss_winbind.so

i download source code into /lib/usr/apps/whatsappname so my samba is in
/usr/local/apps/samba-3.0.28/ and the correct libnss_winbind.so is

file over /lib/libnss_winbind.so and
$ cd /lib
$ ln -s libnss_winbind.so libnss_winbind.so.2

and then getent passwd again, this sould do the trick

tks
Ciro



wrote:

EDITORA\administrator:*:10000:10000:Administrator:/home/EDITORA/administrator:/bin/false your domain users must be mapped to linux users, with "winbind uid", which /usr/local/apps/samba-3.0.28/source/nsswitch/libnss_winbind.so. copy this On Wed, Mar 5, 2008 at 4:05 PM, Helio Calaça Filho <[EMAIL PROTECTED]>

But i have to try with the "+"symbol, just like this exemple?

SAMBA+Administrator
or
i have to try like this way

SAMBAAdminitrator

???





--
Atte,
Hélio Calaça Filho
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
Oliver Henriot, UMS MI2S, http://mi2s.imag.fr/
Moyens Informatiques et Multimédia
Domaine universitaire BP53 / 38041 Grenoble cedex 9 / France
tel.: +33 4 76 51 43 48      fax: +33 4 76 51 47 15

Trust in CNRS's certificates

http://igc.services.cnrs.fr/Doc/General/trust.html

smime.p7s
Description: S/MIME Cryptographic Signature

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba