[Samba] Winbind on Samba 3.5.5 (centos5)

2010-10-19 Thread Adrian Graham
Folks, Having some fun with winbind on Samba 3.5.5 on RHEL5 and/or Centos5. I’ve got it working so ssh logins work correctly and file permissions are seemingly correct with created files etc. Backend authentication is from a Win2K3R2 box running RFC2372 extensions (ie not SFU) and all UIDs etc are

Re: [Samba] Winbind on Solaris

2010-10-12 Thread Robert Freeman-Day
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey, Kevin, On 10/12/2010 01:41 PM, Keun Song wrote: > > > > Hi, > > > Just want to clarify and confirm with everyone, > > If I want my Solaris Samba box to join an AD domain via winbind, I'd need > neither krb5.conf nor krb5.keytab, but i

[Samba] Winbind on Solaris

2010-10-12 Thread Keun Song
Hi, Just want to clarify and confirm with everyone, If I want my Solaris Samba box to join an AD domain via winbind, I'd need neither krb5.conf nor krb5.keytab, but instead only file I'd need is smb.conf with a correct configuration, correct? Thanks in advance. - Kevin

[Samba] Winbind 3.3.8 crash

2010-09-15 Thread Ryan Whelan
Im not sure if this is the place to post this, but winbind just crashed. This is a CentOS machine with the included samba version- 3.3.8. Is this a known bug? or do i need to change something? Is more info needed? Thanks! smb.conf

Re: [Samba] Samba/Winbind issue

2010-09-15 Thread Mark Adams
s [mailto:m...@campbell-lange.net] > Sent: maandag 23 augustus 2010 18:50 > To: Heijden W.A. van der (Walter) > Cc: samba@lists.samba.org; jel...@samba.org > Subject: Re: [Samba] Samba/Winbind issue > > Have you tried to escape it with \ ? > > On Wed, Aug 11, 2010 at

Re: [Samba] winbind and pptpd authentication failure [SOLVED]

2010-09-09 Thread John Anderson
On 09/09/10 16:24, Guenther Deschner wrote: On Thu, Sep 09, 2010 at 11:12:52PM +1000, Andrew Bartlett wrote: On Thu, 2010-09-09 at 14:33 +0200, John Anderson wrote: On 09/09/10 13:57, Andrew Bartlett wrote: On Tue, 2010-09-07 at 17:35 +0200, John Anderson wrote: I have a linux firewall using

Re: [Samba] winbind authentification trouble

2010-09-09 Thread Dale Schroeder
Stefan, I used the pam settings from this article as a starting point. http://www.enterprisenetworkingplanet.com/netos/article.php/10951_3502441_1 It places the directives in the login file instead of common-auth. Otherwise, the basic differences are that I have "sufficient" on both; the orde

[Samba] winbind authentification trouble

2010-09-09 Thread Stefan Froehlich
A Debian/Lenny-Server is connected to a PDC (using samba) and tries to authenticate logins via pam_winbind. User mapping and everything else needed works fine (i.e. especially getent shows all the accounts), however remote logins of domain users fail. I have: | gatekeeper:~# cat /etc/pam.d/common-

Re: [Samba] winbind and pptpd authentication failure

2010-09-09 Thread Guenther Deschner
On Thu, Sep 09, 2010 at 11:12:52PM +1000, Andrew Bartlett wrote: > On Thu, 2010-09-09 at 14:33 +0200, John Anderson wrote: > > On 09/09/10 13:57, Andrew Bartlett wrote: > > > On Tue, 2010-09-07 at 17:35 +0200, John Anderson wrote: > > >> I have a linux firewall using winbind to authenticate users c

Re: [Samba] winbind and pptpd authentication failure

2010-09-09 Thread Andrew Bartlett
On Thu, 2010-09-09 at 14:33 +0200, John Anderson wrote: > On 09/09/10 13:57, Andrew Bartlett wrote: > > On Tue, 2010-09-07 at 17:35 +0200, John Anderson wrote: > >> I have a linux firewall using winbind to authenticate users coming in > >> with PPTP. It all seemed to work OK at first. After a while

Re: [Samba] winbind and pptpd authentication failure

2010-09-09 Thread John Anderson
On 09/09/10 13:57, Andrew Bartlett wrote: On Tue, 2010-09-07 at 17:35 +0200, John Anderson wrote: I have a linux firewall using winbind to authenticate users coming in with PPTP. It all seemed to work OK at first. After a while I noticed that authentication was denied to users who had previously

Re: [Samba] winbind and pptpd authentication failure

2010-09-09 Thread Andrew Bartlett
On Tue, 2010-09-07 at 17:35 +0200, John Anderson wrote: > Hi all > > I'm not sure whether to go to the ppp lists for this, or the samba > lists. I thought I'd try here first. > > I have a linux firewall using winbind to authenticate users coming in > with PPTP. It all seemed to work OK at first

[Samba] winbind and pptpd authentication failure

2010-09-09 Thread John Anderson
Hi all I'm not sure whether to go to the ppp lists for this, or the samba lists. I thought I'd try here first. I have a linux firewall using winbind to authenticate users coming in with PPTP. It all seemed to work OK at first. After a while I noticed that authentication was denied to users w

Re: [Samba] Samba/Winbind issue

2010-09-09 Thread walter.van.der.heijden
lange.net] Sent: maandag 23 augustus 2010 18:50 To: Heijden W.A. van der (Walter) Cc: samba@lists.samba.org; jel...@samba.org Subject: Re: [Samba] Samba/Winbind issue Have you tried to escape it with \ ? On Wed, Aug 11, 2010 at 03:13:49PM +0200, walter.van.der.heij...@nl.abnamro.com wrote: > Hi, &g

[Samba] Samba-winbind 3.5.4 primary group is always domain users!!!???

2010-09-09 Thread Oliver Weinmann
Dear All, I stepped over a strange issue today. I have one installation of samba winbind 3.3.2 on a Ubuntu machine. Changing the primary unix group of a user is updated immediately. On a newer samba 3.5.4 installation the primary group is not updated at all. It always displays "domain users

Re: [Samba] winbind and pptpd authentication failure

2010-09-08 Thread John Anderson
On 09/07/10 18:03, John Anderson wrote: In other words, the ntlm-auth helper and AD server says OK, but the hashes aren't equal, which causes ppp to say "mutual authentication failed". I hacked the ppp sources (chap_ms.c) gently to output the two hashes. More information on this. On the success

[Samba] winbind and pptpd authentication failure

2010-09-07 Thread John Anderson
Hi all I'm not sure whether to go to the ppp lists for this, or the samba lists. I thought I'd try here first. I have a linux firewall using winbind to authenticate users coming in with PPTP. It all seemed to work OK at first. After a while I noticed that authentication was denied to users w

Re: [Samba] Samba/Winbind issue

2010-08-23 Thread Mark Adams
Have you tried to escape it with \ ? On Wed, Aug 11, 2010 at 03:13:49PM +0200, walter.van.der.heij...@nl.abnamro.com wrote: > Hi, > > I have an issue with Samba using winbind. We have Active Directory groups > with underscores (for example sambagroup_underscore). But an underscore in > Samba (

[Samba] Samba/Winbind issue

2010-08-18 Thread walter.van.der.heijden
Hi, I have an issue with Samba using winbind. We have Active Directory groups with underscores (for example sambagroup_underscore). But an underscore in Samba (Unix) is a space in Active Directory. So my question is what character is used in Samba (Unix) for an underscore in Active Directory?

[Samba] Winbind 3.5.4 and SFU

2010-08-12 Thread Ryan Whelan
We have Windows 2008R2 domain controllers running 2003 functional level with SFU (i think thats what its called, im not the windows admin :p ) . With Winbind 3.0.33 (on Redhat 5.5) I can get the UIDs/GIDs from AD without issue using: idmap config DOMAIN:backend = ad idmap config DOMAIN:defa

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-29 Thread Henrik Dige Semark
il.com CC:samba@lists.samba.org Subject: Re: [Samba] Samba + Winbind + Windows 2003 AD Hi Micheal Sorry for not sending that information in the first place, but I though that it was so basic that it wasn't necessary. My nsswitch.conf: # cat /etc/nsswitch.conf # /etc/nsswitch.conf # # Example configuration

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-26 Thread Mucke, Tobias, FCI4
ff: AW: Re: [Samba] Samba + Winbind + Windows 2003 AD Hi Michael, which version of Samba do you have? Are you able to post your Samba configuration? Thank you. Tobias Mit freundlichen Grüßen Tobias Mucke LFK-Lenkflugkörpersysteme GmbH Serverpool, FCI4 Landshuter Straße

[Samba] winbind ADS getent passwd fails, getent passwd works, getent group gives partial list

2010-07-23 Thread Jim Stalewski
I have the following configuration: SuSE Linux Enterprise 11, X86_64 Packages installed with SLES11 or updated from SLES update repo: Samba 3.2.7-11.20.1 MIT Kerberos 5 1.6.3-133.33.1 OpenLDAP 2.4.12-7.18.1 Cyrus SASL 2.1.22-182.20.1 Have one server set up joined to AD (Win2K3 R2) domain as a me

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-19 Thread Necos Secon
ome other method) to keep the clocks in sync. Hopefully, that helps some. > Date: Mon, 19 Jul 2010 11:22:15 -0500 > From: mjl...@gmail.com > To: samba@lists.samba.org > Subject: Re: [Samba] Samba + Winbind + Windows 2003 AD > > In all honesty, this is my first time using a

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-19 Thread Michael Lyon
held via BlackBerry Server. > > > > Von: Michael Lyon > An: Mucke, Tobias, FCI4; samba@lists.samba.org > Gesendet: Mon Jul 19 14:22:37 2010 > Betreff: Re: [Samba] Samba + Winbind + Windows 2003 AD > > > I'm in a 2k8 r2 domain with SFU and

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-19 Thread Mucke, Tobias, FCI4
from handheld via BlackBerry Server. Von: Michael Lyon An: Mucke, Tobias, FCI4; samba@lists.samba.org Gesendet: Mon Jul 19 14:22:37 2010 Betreff: Re: [Samba] Samba + Winbind + Windows 2003 AD I'm in a 2k8 r2 domain with SFU and home shells managed throug

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-19 Thread Michael Lyon
I'm in a 2k8 r2 domain with SFU and home shells managed through the ADUC console. I'm using Samba/WInbind and use samba shares as user home directories that are mounted at login-time on Windows 7 machines. This is a first attempt as we migrated to Windows 2k8r2 in order to have bett

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-19 Thread Mucke, Tobias, FCI4
g [mailto:samba-boun...@lists.samba.org] Im Auftrag von Necos Secon Gesendet: Montag, 19. Juli 2010 01:50 An: samba@lists.samba.org Betreff: Re: [Samba] Samba + Winbind + Windows 2003 AD I accidentally deleted the first set of messages in my email for this thread, but does your DNS resolve properly? What d

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-18 Thread Necos Secon
order for getent to function properly. There is a corresponding option for groups as well. Look at them and let us know. > Date: Mon, 19 Jul 2010 01:12:41 +0200 > From: h...@semark.dk > To: esiot...@gmail.com > CC: samba@lists.samba.org > Subject: Re: [Samba] Samba + Winbind + Win

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-18 Thread Henrik Dige Semark
Hi Micheal Sorry for not sending that information in the first place, but I though that it was so basic that it wasn't necessary. My nsswitch.conf: # cat /etc/nsswitch.conf # /etc/nsswitch.conf # # Example configuration of GNU Name Service Switch functionality. # If you have the `glibc-doc-ref

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-18 Thread Michael Wood
On 18 July 2010 01:34, Henrik Dige Semark wrote: > Hey out there. > > I have to join my UNIX server with an existing Win2k3 AD network. > > My system info: > Debian Lenny > Samba   - 3.4.8 > Winbind - 3.4.8 > > Windows Server 2003 with 2000-style-AD > > My problem is that, I have en UNIX server th

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-18 Thread Henrik Dige Semark
rik Dige Semark Sent: Sunday, July 18, 2010 1:35 AM To: samba@lists.samba.org Subject: [Samba] Samba + Winbind + Windows 2003 AD Hey out there. I have to join my UNIX server with an existing Win2k3 AD network. My system info: Debian Lenny Samba - 3.4.8 Winbind - 3.4.8 Windows Server 2003 with 2000-

Re: [Samba] Samba + Winbind + Windows 2003 AD

2010-07-18 Thread Mucke, Tobias, FCI4
Commercial Register: Amtsgericht Ingolstadt, HRB 4365 -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Henrik Dige Semark Sent: Sunday, July 18, 2010 1:35 AM To: samba@lists.samba.org Subject: [Samba] Samba + Winbind + Windows 2003

[Samba] Samba + Winbind + Windows 2003 AD

2010-07-17 Thread Henrik Dige Semark
Hey out there. I have to join my UNIX server with an existing Win2k3 AD network. My system info: Debian Lenny Samba - 3.4.8 Winbind - 3.4.8 Windows Server 2003 with 2000-style-AD My problem is that, I have en UNIX server that have to run auth up against our existing windows 2003 AD. I hav

Re: [Samba] winbind and authentication with local accounts

2010-07-14 Thread Philipp Braband
s the local users (because they are mapped with "idmap backend = ad"). Cheers, Philipp >Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im >Auftrag von Rob Moser >Gesendet: Dienstag, 13. Juli 2010 17:09 >An: samba@lists.samba.org >Betreff:

Re: [Samba] winbind and authentication with local accounts

2010-07-13 Thread Rob Moser
tries to authenticate > them against the AD which fails. Is there a way to “teach” winbind to try to > authenticate every user locally if they dont use DOMAIN\peter ? > Hope you understand my problem in spite of my bad English ☺ > > > My configuration: > > SLES11 SP0 >

[Samba] winbind and authentication with local accounts

2010-07-13 Thread Philipp Braband
-3.2.7-11.6 samba-winbind-3.2.7-11.6 krb5-1.6.3-133.10 smb.conf: [global] workgroup = DOMAIN netbios aliases = SAMBASERVER interfaces = eth0, 127.0.0.1/8 bind interfaces only = Yes ;security = ADS security = ADS password server = 192.168.1.1

Re: [Samba] samba winbind is not showing full list

2010-06-29 Thread *...@ppu
Hi all, i came to know the difference between DL and Security group . previously i was searching for a DL with wbonfo -g .:) wbinfo -g is showing corrrect results . now i am having the only problem that samba is not accessible with hostname and it works with IP address.. i have added following li

Re: [Samba] samba winbind is not showing full list

2010-06-28 Thread *...@ppu
, 2010 at 6:44 PM, wrote: > > > > --- Original message --- > *Subject:* Re: [Samba] samba winbind problem with trusted domains > *From:* *...@ppu > *To:* > *Date:* Friday, 25/06/2010 4:09 AM > > hi > > yes netbios is active on windows machines and

Re: [Samba] samba winbind problem with trusted domains

2010-06-25 Thread tms3
--- Original message --- Subject: Re: [Samba] samba winbind problem with trusted domains From: *...@ppu To: Date: Friday, 25/06/2010 4:09 AM hi yes netbios is active on windows machines and i m able to ping samba server with .domain.extension. it is asking for user authentiation but

Re: [Samba] samba winbind problem with trusted domains

2010-06-24 Thread tms3
SNIP thanks for your reply .Those are trusted domains and wbinfo-m is showing all the trusted domains. Anyways I have resolved the problem with Likewise open backend authentication tool. :) . But now I am facing another problem . i am not able to access samba shares using netbios name

Re: [Samba] samba winbind problem with trusted domains

2010-06-24 Thread *...@ppu
Hi TMS, thanks for your reply .Those are trusted domains and wbinfo-m is showing all the trusted domains. Anyways I have resolved the problem with Likewise open backend authentication tool. :) . But now I am facing another problem . i am not able to access samba shares using netbios name even wit

Re: [Samba] Winbind problem: can't convert sids and gids

2010-06-23 Thread Rob Moser
I've had the problem with various versions of 3.3.x - most recently 3.3.8 and 3.3.12. I have an older machine running 3.2.8 which works fine using essentially an identical smb.conf file. My smb.conf file also has the idmap entries for each trusted domain, with non-overlapping id ranges. I did se

Re: [Samba] Winbind problem: can't convert sids and gids

2010-06-23 Thread Gaiseric Vandal
Which samba version? I had Samba 3.0.x on Solaris 10, and winbind able to allocate uids and gids to users and groups from trusted domain (at least to Windows 2003 domains in mixed mode.) When I switched to a Samba 3.4.x PDC the allocation of new uids and gids broke.I suspect there is some

[Samba] Winbind problem: can't convert sids and gids

2010-06-23 Thread Rob Moser
I have a problem where I can't browse to a samba share from Windows (Server 2008); instead I get the error: The group name could not be found The winbind log contains the message: could not convert gid 507 to sid Suspecting a permissions problem, I went and looked at the files and the group own

[Samba] samba winbind problem with trusted domains

2010-06-23 Thread *...@ppu
hi all i am new to samba and struggling with trusted domains authentication from many days .i have a win2k3 domain(corp.raju.ad )and win2k8 domain ( testraju.ad) . i have joined samba server as a member to win2k8 domain (testraju.ad) using net ads join commands / i m able to access samba shares

Re: [Samba] Winbind not starting in AD member(samba joining domain)configuration.

2010-06-15 Thread justin joseph
t...@tms3.com wrote: --- Original message --- Subject: Re: [Samba] Winbind not starting in AD member(samba joining domain)configuration. From: justin joseph To: Date: Monday, 14/06/2010 6:21 AM t...@tms3.com wrote: SNIP Facing an issue with winbind not starting with below error

Re: [Samba] Winbind not starting in AD member(samba joining domain)configuration.

2010-06-14 Thread justin joseph
t...@tms3.com wrote: SNIP Facing an issue with winbind not starting with below error log(taken from /var/log/syslog): Jun 14 15:48:33 enpaq winbindd[15941]: [2010/06/14 15:48:33, 0] param/loadparm.c:6767(service_ok) Jun 14 15:48:33 enpaq winbindd[15941]: WARNING: No path in service printers -

Re: [Samba] Winbind not starting in AD member(samba joining domain)configuration.

2010-06-14 Thread tms3
SNIP Facing an issue with winbind not starting with below error log(taken from /var/log/syslog): Jun 14 15:48:33 enpaq winbindd[15941]: [2010/06/14 15:48:33, 0] param/loadparm.c:6767(service_ok) Jun 14 15:48:33 enpaq winbindd[15941]: WARNING: No path in service printers - making it unavaila

[Samba] Winbind not starting in AD member(samba joining domain) configuration.

2010-06-14 Thread justin joseph
Hello Facing an issue with winbind not starting with below error log(taken from /var/log/syslog): Jun 14 15:48:33 enpaq winbindd[15941]: [2010/06/14 15:48:33, 0] param/loadparm.c:6767(service_ok) Jun 14 15:48:33 enpaq winbindd[15941]: WARNING: No path in service printers - making it unav

Re: [Samba] Winbind AD authentication problem

2010-06-12 Thread RedOctober
Hi - you manage to resolve this? I also seem to be having these problems. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Winbind Samba 3.5.1

2010-05-31 Thread Deyan Stoykov
Hi! I'm having this problem as well. I have filed a bug report: https://bugzilla.samba.org/show_bug.cgi?id=7481 Regards, Deyan Mark Ruys wrote: Somehow I can't figure out what's going wrong. I have a Samba server running as PDC. Workstations can join the domain and users can logon. So far so

Re: [Samba] winbind ubuntu 9.10 crashing machine

2010-05-18 Thread Jim Kusznir
Oh, note for the "does not crash the system", there is one other modification that is required to be made at the same time: I need to remove winbind from the pam.d/* files. In order for the system to boot successfully when winbind is badly broken/crashed, I must simultaneously remove it from nsswi

Re: [Samba] winbind ubuntu 9.10 crashing machine

2010-05-18 Thread Jim Kusznir
It doesn't crash the system, but it doesn't authenticate against winbind, and winbind is still very broke (large quantity of log messages, wbinfo -u don't return, etc). --Jim On Tue, May 18, 2010 at 12:07 PM, Chris Smith wrote: > On Thu, May 13, 2010 at 1:12 PM, Jim Kusznir wrote: >> Any more s

Re: [Samba] winbind ubuntu 9.10 crashing machine

2010-05-18 Thread Chris Smith
On Tue, May 18, 2010 at 3:19 PM, Eliel wrote: > it would problably not crashs, but will not use winbind to authenticate "Probably" doesn't answer the question. Yes, it wouldn't use winbind to authenticate but the winbindd daemon would still be running and maybe that additional info (whether it cr

Re: [Samba] winbind ubuntu 9.10 crashing machine

2010-05-18 Thread Chris Smith
On Thu, May 13, 2010 at 1:12 PM, Jim Kusznir wrote: > Any more suggestions?  Anyone actually using winbind successfully? What changes if you change: /etc/nsswitch.conf - passwd: compat winbind group: compat winbind to: - passwd: compat group:

Re: [Samba] winbind ubuntu 9.10 crashing machine

2010-05-18 Thread Jim Kusznir
Ack, this message got burried in my mail reader...Thanks for the reply. My entire smb.conf is included in my origional message to the list; I'll paste it again here: smb.conf [global] security = ads netbios name = casas-lin realm = CASAS.WSU.EDU workgroup

Re: [Samba] winbind ubuntu 9.10 crashing machine

2010-05-13 Thread Jim Kusznir
Am I the only one experiencing such breaking from winbind? I'm suspicious of whether it actually works at all, and if I can't get it working better "real soon now", I'm going to have to ditch it all together. I really can't afford half of my cpu resources tied up in logging messages, or my critic

[Samba] Winbind and getent issues

2010-05-11 Thread Jeremy Farrar
I am currently setting up a cluster of Samba servers using DRBD and CTDB. I have gotten the DRBD and CTDB configured on my cluster. I have configured Samba and Winbind to join my active directory domain. Right now I am struggling to get authentication through Winbind to work. My /var/log/secure fil

Re: [Samba] winbind ubuntu 9.10 crashing machine

2010-05-11 Thread Jim Kusznir
Some more info: On my (working) Ubuntu 9.04 system, its often consistently at around 50% load, with winbind and syslogd using up that CPU. In /var/log/syslog, I get fairly continuous logging of: May 11 09:06:39 casas-thin-serv winbindd[11370]: rpc_api_pipe: host ad1.casas.wsu.edu, pipe \NETLOG

Re: [Samba] winbind ubuntu 9.10 crashing machine

2010-05-11 Thread Laurent BARRAILLE
Le 10/05/2010 19:14, Jim Kusznir a écrit : Hi all: I've got a couple Ubuntu 9.10 machines that are suffering from a recurring failure of winbind that essentially crash the machine. When the system is in the "crashed state", one can ping the system, but all forms of login fail. It's normal, winb

[Samba] winbind ubuntu 9.10 crashing machine

2010-05-10 Thread Jim Kusznir
Hi all: I've got a couple Ubuntu 9.10 machines that are suffering from a recurring failure of winbind that essentially crash the machine. When the system is in the "crashed state", one can ping the system, but all forms of login fail. It will not even respond to tftpd requests; ssh connections "

Re: [Samba] Winbind to a Samba 3.4 server

2010-05-07 Thread Gaiseric Vandal
ell I think the solution may be to move forward to either 3.5 or back to 3.3. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Timothy Johnson Sent: Thursday, May 06, 2010 10:07 PM To: samba@lists.samba.org Subject: [Samba] Winbind

[Samba] Winbind to a Samba 3.4 server

2010-05-06 Thread Timothy Johnson
I thought I had setup winbind correctly as I can login to my ubuntu 9.04 machine with domain users, but I am trying to get ntlm working with squid, and while testing winbind I get the following error. sudo wbinfo -a MBAG\\user%passwd plaintext password authentication failed Could not authenticate

Re: [Samba] Winbind issues with CTDB

2010-05-03 Thread Jeremy Farrar
I extracted the source code from that RPM as you recommended. I was able to build and install ctdb and samba without any errors. I can now join my domain and start winbind without incident. Thank you very much for your assistance. On Sat, May 1, 2010 at 3:46 AM, Volker Lendecke wrote: > On Fri, A

[Samba] CTDB + Samba + Winbind + ActiveDirectory

2010-05-01 Thread Jeremy Farrar
I am attempting to configure a Samba cluster using DRBD and CTDB. I am currently having some issues with winbind. Everytime I start winbind or attempt to join my server to the domain the machine stalls and the ctdb error log is filled with the following: 2010/04/30 14:49:59.367076 [ 8394]: server/

Re: [Samba] Winbind issues with CTDB

2010-05-01 Thread Volker Lendecke
On Fri, Apr 30, 2010 at 09:26:59PM -0500, Jeremy Farrar wrote: > Thank you very much for the quick reply. > > I obtained my CTDB source via rsync according to the documentation here: > > http://wiki.samba.org/index.php/CTDB_Setup#Getting_the_source_code Unfortunately that rsync source at samba.o

Re: [Samba] Winbind issues with CTDB

2010-04-30 Thread Jeremy Farrar
Thank you very much for the quick reply. I obtained my CTDB source via rsync according to the documentation here: http://wiki.samba.org/index.php/CTDB_Setup#Getting_the_source_code Is there another source that would have a more recent version? Should I move back to an older version of Samba that

Re: [Samba] Winbind issues with CTDB

2010-04-30 Thread Volker Lendecke
On Fri, Apr 30, 2010 at 04:52:45PM -0500, Jeremy Farrar wrote: > I am attempting to configure a Samba cluster using DRBD and CTDB. I am > currently having some issues with winbind. Everytime I start winbind or > attempt to join my server to the domain the machine stalls and the ctdb > error log is

[Samba] Winbind issues with CTDB

2010-04-30 Thread Jeremy Farrar
I am attempting to configure a Samba cluster using DRBD and CTDB. I am currently having some issues with winbind. Everytime I start winbind or attempt to join my server to the domain the machine stalls and the ctdb error log is filled with the following: 2010/04/30 14:49:59.367076 [ 8394]: server/

Re: [Samba] Winbind 3.5.2 caching issues under SLES11???

2010-04-27 Thread Volker Lendecke
On Tue, Apr 27, 2010 at 10:10:29AM -0400, Chris Smith wrote: > > netsamlogon_cache.tdb is probably the culprit. Once you log > > in using pam or for example wbinfo -a the problem should be > > gone. > > I deleted netsamlogon_cache.tdb as well. > Didn't do a wbinfo -a, but did a wbinfo -u and wbinf

Re: [Samba] Winbind 3.5.2 caching issues under SLES11???

2010-04-27 Thread Chris Smith
On Mon, Apr 26, 2010 at 4:35 AM, Volker Lendecke wrote: > netsamlogon_cache.tdb is probably the culprit. Once you log > in using pam or for example wbinfo -a the problem should be > gone. I deleted netsamlogon_cache.tdb as well. Didn't do a wbinfo -a, but did a wbinfo -u and wbinfo -g. The idmapp

Re: [Samba] Winbind 3.5.2 caching issues under SLES11???

2010-04-26 Thread Oliver Weinmann
Ok, there is no bug. I looked through the smb.conf and added the following parameters: idmap cache time = 1 idmap negative cache time = 1 winbind cache time = 1 Now SLES11 acts as expected. Also I noticed that running a su - "username" is not the same as wbinfo -a. :) Thanks and Regards, Oliver

Re: [Samba] Winbind 3.5.2 caching issues under SLES11???

2010-04-26 Thread Neil Price
On 2010/04/23 10:58 PM, Chris Smith wrote: Don't know if it's related but on 2 systems with 3.5.2 I could not get the new idmap backend (moved from tdb to rid) to work without deleting the gencache* tdb's in addition to the winbind ones. I had the same problem on 3.4.7 moving from tdb to ld

Re: [Samba] Winbind 3.5.2 caching issues under SLES11???

2010-04-26 Thread Volker Lendecke
On Mon, Apr 26, 2010 at 10:48:19AM +0200, Oliver Weinmann wrote: > Ok, I have now deleted the netsamlogon_cache.tdb, restarted the samba > service and logged in as the user. The groups are now no longer shown. I > tried the same steps again with a different user and the problem is the > same again.

Re: [Samba] Winbind 3.5.2 caching issues under SLES11???

2010-04-26 Thread Oliver Weinmann
netsamlogon_cache.tdb is probably the culprit. Once you log in using pam or for example wbinfo -a the problem should be gone. Volker Ok, I have now deleted the netsamlogon_cache.tdb, restarted the samba service and logged in as the user. The groups are now no longer shown. I tried the same steps

Re: [Samba] Winbind 3.5.2 caching issues under SLES11???

2010-04-26 Thread Volker Lendecke
On Mon, Apr 26, 2010 at 09:51:47AM +0200, Oliver Weinmann wrote: > > Deleting the tdb files didn't solve the problem. It's really weird. For > example I have a AD user that is member of three groups: > > Domain users (primary) > > And two other project groups. > > I removed him from the two pr

Re: [Samba] Winbind 3.5.2 caching issues under SLES11???

2010-04-26 Thread Oliver Weinmann
Deleting the tdb files didn't solve the problem. It's really weird. For example I have a AD user that is member of three groups: Domain users (primary) And two other project groups. I removed him from the two project groups, the change is immediately effective under SLES9 3.5.2 Winbind but on

Re: [Samba] Winbind 3.5.2 caching issues under SLES11???

2010-04-23 Thread Chris Smith
On Fri, Apr 23, 2010 at 10:40 AM, Oliver Weinmann wrote: > I don't know if this is a problem of SLES11 or winbind itself. I > recently installed the lastest samba winbind 3..5.2 on a SLES9 box and a > SLES11 box. > > If I remove a user from a group in Active Directory the

[Samba] Winbind 3.5.2 caching issues under SLES11???

2010-04-23 Thread Oliver Weinmann
Hi, I don't know if this is a problem of SLES11 or winbind itself. I recently installed the lastest samba winbind 3..5.2 on a SLES9 box and a SLES11 box. If I remove a user from a group in Active Directory the change is visible immediately on the SLES9 box but not on the SLES11 box. Bot

Re: [Samba] Winbind Samba 3.5.1

2010-04-23 Thread Giovani Moda
> Winbind log shows: > [13916]: request interface version > [13916]: request location of privileged pipe > [13916]: pam auth markr > [13753]: dual pam auth markr > could not open handle to NETLOGON pipe > Plain-text authentication for user markr returned > NT_STATUS_INVALID_HANDLE (PAM: 4) > [1391

[Samba] Winbind - DUAL_SID2UID empty domain?

2010-04-21 Thread Ryan Hardy
I am having a strange problem that I thought someone might be help resolve. I am using Samba 3.4.7 at the moment, but I've had the same issue with Samba 3.4.6 and Samba 3.5.2. NOTE: Domain, hostnames, usernames and SIDs have been changed to protect the guilty. I am seeing an unable to success

[Samba] ?! Winbind stops (causing troubles with my Boss and customers)

2010-04-14 Thread Mistofeles
If I give command 'locale', I get _14_ lines. 'Winbind -d10' stops after it has written _14_ times this comment to /var/log/samba/log.winbindd: [2010/04/12 14:08:06, 5] lib/charcnv.c:82(charset_name) Substituting charset 'UTF-8' for LOCALE Cursor doesn't appear again but with Ctrl-C. What

[Samba] Winbind pam_tally increment

2010-04-12 Thread Schneider, Craig-P65851
I am looking for a way to configure PAM using pam_winbind and pam_tally2 so that the tally count is only incremented when cached credentials are used. Thx, craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba

Re: [Samba] Winbind is kill me!

2010-04-12 Thread Todd And Margo Chester
On 04/11/2010 09:53 PM, Steve Tempest wrote: Hi ToddandMargo, As root on the server type ntsysv http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/custom-guide/s1-se rvices-ntsysv.html This will bring up a little program that you can use to enable and disable services. Regards Stev

Re: [Samba] Winbind is kill me too

2010-04-12 Thread ptmusta
12.4.2010 6:48, Todd And Margo Chester kirjoitti: Hi All, Do I even need winbind? Is there somewhere some information about troubleshootin winbind ? Winbind doesn't work at all in my server. With 'winbindd -d10' I find in the end of the log.winbindd _14_ lines like this: [2010/04/12 09:51:1

Re: [Samba] Winbind is kill me!

2010-04-11 Thread Steve Tempest
-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Alan Pek Sent: Monday, 12 April 2010 2:38 PM To: toddandmargo Cc: samba@lists.samba.org; samba-boun...@lists.samba.org Subject: Re: [Samba] Winbind is kill me! Hi There must a way to disable winbind, inside /etc/init.d/* or

Re: [Samba] Winbind is kill me!

2010-04-11 Thread Alan Pek
Hi There must a way to disable winbind, inside /etc/init.d/* or /etc/rc*. Not sure what is winbind for, probably for binding window related server. Regards Alan --- This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received th

[Samba] Winbind is kill me!

2010-04-11 Thread Todd And Margo Chester
Hi All, I am using CentOS 5.4 (Old-Out-Of-Date) and $ rpm -qa samba\* samba-client-3.0.33-3.15.el5_4.1 samba-common-3.0.33-3.15.el5_4.1 samba-3.0.33-3.15.el5_4.1 On Thursday, at a customer's site, I did my CentOS updates and got the above sort-of-new version of Samba. Problem: when CentOS boot

Re: [Samba] ?: winbind dont start

2010-04-01 Thread Mistofeles
26.3.2010 14:56, Mistofeles kirjoitti: Still the same problem. WINBINDD does not start. Even winbindd -d10 doesn't stops. After I have stopped it with Ctrl-C, I can see in /var/log/samba the same message repeated tens of times in one second: /log.winbind the last line is [2010/04/01 14:28:44,

Re: [Samba] Winbind eventually locks "forever" if one of ActiveDirectory refuses all connections

2010-03-26 Thread Andrew Tranquada
I do have winbind running in debug mode 10 and currently I have one of the servers in this state, (so if someone lets me know what will help I can get it to them. On Fri, Mar 26, 2010 at 10:56 AM, Andrew Tranquada < andrew.tranqu...@gmail.com> wrote: > I see this was created as bug 7259 but I did

[Samba] Winbind eventually locks "forever" if one of ActiveDirectory refuses all connections

2010-03-26 Thread Andrew Tranquada
I see this was created as bug 7259 but I did not see anything in the mailing list about this problem. Does anyone else have a problem like this? Is there something in my configuration that is incorrect? We have two domain controllers, and if we reboot either one of them, winbind hangs, and we canno

Re: [Samba] ?: winbind dont start

2010-03-26 Thread Mistofeles
25.3.2010 9:15, Pasi Mustalahti kirjoitti: > Date seems to be abt. 28 sec out of sync compared to her twin Tested > with 'date'). The twins seem to use different time servers of our net > (tested with 'ntpq -p'). I Managed to get the times within 1 sec in all the linux servers. Still winbi

Re: [Samba] ?: winbind dont start

2010-03-25 Thread Pasi Mustalahti
> On Wed, Mar 24, 2010 at 4:12 AM, Mistofeles wrote: > > > I have two similar PC with similar Ubuntu 9.10 srv installation. > > In the beginning both authenticated fine against our AD with Samba. > > I changed the NIC to another PC and moved it to another subdomain. > > Old IP changed from X

[Samba] Winbind home directory not resolving properly

2010-03-24 Thread Jim Kusznir
Hi all: I've got an issue on one of my winbind-configured systems. I've got it configured per instructions found on one of ubuntu's forum sites. I've configured two 9.10 systems, one works perfectly. I've copied most of the files over to the non-working system; they are configured identically as

Re: [Samba] ?: winbind dont start

2010-03-24 Thread Robert LeBlanc
On Wed, Mar 24, 2010 at 4:12 AM, Mistofeles wrote: > I have two similar PC with similar Ubuntu 9.10 srv installation. > In the beginning both authenticated fine against our AD with Samba. > I changed the NIC to another PC and moved it to another subdomain. > Old IP changed from XXX.XXX.104.187 to

[Samba] ?: winbind dont start

2010-03-24 Thread Mistofeles
I have two similar PC with similar Ubuntu 9.10 srv installation. In the beginning both authenticated fine against our AD with Samba. I changed the NIC to another PC and moved it to another subdomain. Old IP changed from XXX.XXX.104.187 to XXX.XXX.41.32. The other PC works OK. SSH works in both. So

Re: [Samba] winbind doing dns on short domain

2010-03-19 Thread Andrew Masterson
-Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Jim Kusznir Sent: Wednesday, March 10, 2010 7:20 PM To: samba@lists.samba.org Subject: [Samba] winbind doing dns on short domain Hi all: I'm building an authentic

[Samba] Winbind Samba 3.5.1

2010-03-12 Thread Mark Ruys
Somehow I can't figure out what's going wrong. I have a Samba server running as PDC. Workstations can join the domain and users can logon. So far so good. I need winbind to be able to authorize a radius server to the PDC. This I cannot achieve. If someone got give me a clue, I spend already qui

[Samba] winbind doing dns on short domain

2010-03-10 Thread Jim Kusznir
Hi all: I'm building an authentication infrastructure for combined windows plus linux clients. To that end, I have a Win Server 2008r2 ADS and a win svr 2008r2 client, and an ubuntu 9.10 client running the default samba + winbind (whatever is in their production repos). I had it 95% wo

<    1   2   3   4   5   6   7   8   9   10   >