---- [EMAIL PROTECTED] wrote: > > ---- [EMAIL PROTECTED] wrote: > > I am using the following in my smb.conf on samba-3.0.28-0.el5.8 > > > > idmap domains = MYDOMAIN > > idmap config MYDOMAIN:backend = rid > > idmap config MYDOMAIN:base_rid = 998 > > idmap config MYDOMAIN:range = 998 - 49999 > > idmap uid = 998-20000 > > idmap gid = 998-20000 > > template homedir = /home/users/%U > > # template primary group = "Domain Users" > > template shell = /bin/bash > > winbind separator = + > > ; winbind use default domain = Yes > > winbind enum users = yes > > winbind enum groups = yes > > > > The problem was first noticed when we connected to another member server > > and noticed that all of the usernames and groups were different. > > During trouble shooting we noticed that wbinfo was reporting the list of > > users but getent was not check libnss_winbind.so > > We just copied it to every directory we thought it might be looking > > > > /lib/libnss_winbind.so > > /lib64/libnss_winbind.so > > /lib64/libnss_winbind.so.2 > > /lib64/security/pam_winbind.so > > /usr/lib/libnss_winbind.so > > /usr/lib64/libnss_winbind.so > > /usr/lib64/nss/libnss_winbind.so > > /usr/lib64/nss/libnss_winbind.so.2 > > /usr/lib64/pppd/2.4.4/winbind.so > > > > Deleted the /var/cache/samba/winbind_cache.tdb > > and winbindd_idmap.tdb > > > > after restarting winbind and samba the winbindd_idmap.tdp did not reappear. > > and getent was still not working. > > > > Also seeing the following error when restart winbind > > > > Nov 6 11:57:58 localhost winbindd[21350]: [2008/11/06 11:57:58, 0] > > nsswitch/winbindd_cache.c:initialize_winbindd_cache(2230) > > Nov 6 11:57:58 localhost winbindd[21350]: initialize_winbindd_cache: > > clearing cache and re-creating with version number 1 > > Nov 6 11:57:58 localhost winbindd[21351]: [2008/11/06 11:57:58, 0] > > rpc_client/cli_pipe.c:cli_rpc_pipe_open_ntlmssp_internal(2363) > > Nov 6 11:57:58 localhost winbindd[21351]: > > cli_rpc_pipe_open_ntlmssp_internal: cli_rpc_pipe_bind failed with error > > NT_STATUS_NETWORK_ACCESS_DENIED > > > Okay, I was able to get getent to work. > had to go back to ldconfig to get the library files to load the variants of > libnss_winbind. > > So now am trying to get it to allow domain users to login and get the uid's > and gid's to match across servers. > I now have 2 servers reporting different uid's, haven't checked the gid's, but I assume I have the same problem.
On system running samba-3.0.10-1.4E.9 MYDOMAIN+user1:*:10115:10000:SMB User:/home/users/user1:/bin/bash MYDOMAIN+user2:*:10116:10000:SMB User:/home/users/user2:/bin/bash MYDOMAIN+user3:*:10011:10000:SMB User:/home/users/user3:/bin/bash MYDOMAIN+user4:*:10008:10000:SMB User:/home/users/user4:/bin/bash On system 2 running samba samba3-3.0.32-36 MYDOMAIN+user1:*:12700:10000:SMB User:/home/users/user1:/bin/bash MYDOMAIN+user2:*:12702:10000:SMB User:/home/users/user2:/bin/bash MYDOMAIN+user3:*:12710:10000:SMB User:/home/users/user3:/bin/bash MYDOMAIN+user4:*:12718:10000:SMB User:/home/users/user4:/bin/bash -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba