[Samba] Does anyone have winbind working on Freebsd?
I have been trying to setup a Samba 2.2.6 server on FreeBSD 4.7. I want to use my NT4 domain for authentication of users. It looks like everything is setup properly as far as winbind is concerned, see below for results using wbinfo. I am still prompted for a password when trying to connect to the samba share. I cannot list the shares using "smbclient -L servername -Udomain+username" either, I get a server timeout error and the following error in my log.smbd: error connecting to 10.110.22.7:445 (Invalid argument) Using "getent passwd" only returns the unix users, not any domain users. I configured samba using --with-winbind and --with-winbind-auth-challenge, and followed "Unified logons between NT and Unix using winbind". Joined the samba server to my NT domain successfully. Freebsd 4.7 does not have a /lib folder so at the step for copying libnss_winbind.so to the /lib folder, I am copying to /usr/local/lib. I have also tried using the following folders: /usr/lib /usr/compat/linux/usr/lib /usr/compat/linux/lib but it still doesn't work. Does anyone have any idea why I am receiving the above error? I'm sure if I could correct the error this would all work, and if I could get "getent passwd" to show my domain users as well as just the local unix users, again this would be working. TIA for any help. wbinfo -t returns "Secret is good" wbinfo -u returns a list of all my domain users wbinfo -g returns a list of all domain groups wbinfo -a mydomain+myuser%mypassword returns success for both plaintext and challenge/response Here's my smb.conf: # Samba config file created using SWAT # from 10.110.22.40 (10.110.22.40) # Date: 2002/11/16 15:19:26 # Global parameters [global] workgroup = MYDOMAIN security = DOMAIN encrypt passwords = Yes password server = * winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind enum users = yes winbind enum groups = yes log level = 2 wins server = 192.168.0.7 [work] path = /usr/work valid users = "Domain Users" read only = No Here's my log.smbd: [2002/11/16 15:59:13, 2] param/loadparm.c:do_section(3055) Processing section "[work]" [2002/11/16 15:59:13, 2] lib/interface.c:add_interface(81) added interface ip=10.110.22.78 bcast=10.110.23.255 nmask=255.255.254.0 [2002/11/16 15:59:48, 2] smbd/reply.c:reply_special(92) netbios connect: name1=EDM-GEO name2=EDM-02 [2002/11/16 15:59:48, 2] smbd/reply.c:reply_special(111) netbios connect: local=edm-geo remote=edm-02 [2002/11/16 15:59:48, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 10.110.22.7 ( 10.110.22.7 ) [2002/11/16 15:59:48, 2] lib/util_sock.c:open_socket_out(874) error connecting to 10.110.22.7:445 (Invalid argument) [2002/11/16 15:59:54, 2] smbd/service.c:make_connection(331) Invalid username/password for work [nobody] [2002/11/16 15:59:56, 2] smbd/service.c:make_connection(331) Invalid username/password for work [nobody] [2002/11/16 16:00:47, 2] smbd/server.c:exit_server(461) Closing connections -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Winbind basic questions
I have been trying to setup a Samba 2.2.6 server on FreeBSD 4.7. I want to use my NT4 domain for authentication of users. I am getting confused reading all the documents as to whether I need PAM or not. I have installed Samba successfully and as far as I can tell it looks like it's working: wbinfo -t returns "Secret is good" wbinfo -u returns a list of all my domain users wbinfo -g returns a list of all domain groups wbinfo -a mydomain+myuser%mypassword returns success for both plaintext and challenge/response - Do I have to use PAM if all I want is to access the following Samba share from my W2K clients? - Should I install Samba configured using --with-winbind, or --with-winbind-auth-challenge as well (I have tried both but neither work) - If I do need PAM, I am reading conflicting info from the /swat/help/PAM-Authentication-And-Samba.html file. It states "Note that Samba always ignores PAM for authentication in the case of encrypt passwords = yes", which I need if I am using security = domain - If I do not need PAM to authenticate and it "appears" that I have installed and configured samba / winbind properly as per the wbinfo lines above, why can't I access the share? - Do I need to create user accounts on the samba server? (I hope not, I understand that's what winbind is for) - Do I need to create any machine accounts? (Other than joining the samba server to the domain.) Here's my smb.conf: # Samba config file created using SWAT # from 10.110.22.40 (10.110.22.40) # Date: 2002/11/16 15:19:26 # Global parameters [global] workgroup = MYDOMAIN security = DOMAIN encrypt passwords = Yes password server = * winbind uid = 1-2 winbind gid = 1-2 winbind separator = + winbind enum users = yes winbind enum groups = yes log level = 2 wins server = 192.168.0.7 [work] path = /usr/work valid users = @"Domain Users" read only = No Here's my log.smbd: [2002/11/16 15:59:13, 2] param/loadparm.c:do_section(3055) Processing section "[work]" [2002/11/16 15:59:13, 2] lib/interface.c:add_interface(81) added interface ip=10.110.22.78 bcast=10.110.23.255 nmask=255.255.254.0 [2002/11/16 15:59:48, 2] smbd/reply.c:reply_special(92) netbios connect: name1=EDM-GEO name2=EDM-02 [2002/11/16 15:59:48, 2] smbd/reply.c:reply_special(111) netbios connect: local=edm-geo remote=edm-02 [2002/11/16 15:59:48, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 10.110.22.7 ( 10.110.22.7 ) [2002/11/16 15:59:48, 2] lib/util_sock.c:open_socket_out(874) error connecting to 10.110.22.7:445 (Invalid argument) [2002/11/16 15:59:54, 2] smbd/service.c:make_connection(331) Invalid username/password for work [nobody] [2002/11/16 15:59:56, 2] smbd/service.c:make_connection(331) Invalid username/password for work [nobody] [2002/11/16 16:00:47, 2] smbd/server.c:exit_server(461) Closing connections -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind still asks for password
I am trying to setup a FreeBSD 4.7 Samba 2.2.6 server for W2K clients using winbind. Everything appears to be working but when I try to connect to the samba share, I am prompted for a password and no valid password will allow me to connect. I configured samba using --with-winbind and --with-winbind-auth-challenge, and followed "Unified logons bewteen NT and Unix using winbind". Joined the samba server to my NT domain successfully. wbinfo -t returns "Secret is good" wbinfo -u returns a list of all my domain users wbinfo -g returns a list of all domain groups wbinfo -a mydomain+myuser%mypassword returns success for both plaintext and challenge/response Do I need to use PAM if I am only trying to access a samba share and all of the above work? If I need to use PAM what config files do I create in the pam.d folder? smbd.conf, or samba.conf etc. Thanks in advance. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
