Re: samba + winbindd with NT-DC problem... i'm stuck.

Leandro Ariel Gomez Chavarria wrote:

>I think your problem is this:
> =20
>
>> passwd: files winbind
>> group:  files winbind
>> shadow: files winbind nis
>>   =20
>>
>
>the correct modification for nsswitch is=20
> passwd: files winbind
> group:  files winbind
> shadow: files nis
>
>DON'T put winbind in shadow line!
>
>then try with "getenet passwd" or "getent group" and you should see all
>users in /etc/passwd and after them domain users.
>
>let me know if it works=20
>
>good luck, leandro.-
>
> =20
>
>>>>leopardb <[email protected]> 11/21/03 07:30am >>>
>>>>       =20
>>>>
>Bj=F6rn Andersen wrote:
>
> =20
>
>>Hello Group,
>>
>>I'm really stuck here.  I try to get an samba to authenticate it's
>>   =20
>>
>users
> =20
>
>>nicely
>>against an NT-DC, which will later be upgraded to W2K or W2K3
>>
>>My system : Suse 8.1, samba-2.2.5-80, samba-client-2.2.5-80
>>
>>My test-config for smb:
>>[global]
>>   winbind separator =3D +
>>   winbind cache time =3D 0
>>   template shell =3D /bin/bash
>>   template homedir =3D /home/%D/%U
>>   winbind uid =3D 10000-20000
>>   winbind gid =3D 10000-20000
>>   workgroup =3D FOERDE
>>   security =3D domain
>>   encrypt passwords =3D Yes
>>   password server =3D SMSERVER SERVER01
>>[daten]
>>   path =3D /srv/samba/daten
>>   writeable =3D no
>>   write list =3D root FOERDE+300
>>   valid users =3D root 300 FOERDE+300 @FOERDE+218
>>
>>winbindd runs as daemon, "wbinfo -u" and  "wbinfo -g"  gives the
>>   =20
>>
>right
> =20
>
>>domain users & groups,
>>as well as "getent group"  and   "getent passwd".
>>strangely even ...
>> # wbinfo -a foerde+300%password
>>works with an output of...
>> plaintext password authentication succeeded
>> error code was NT_STATUS_OK (0x0)
>> challenge/response password authentication succeeded
>> error code was NT_STATUS_OK (0x0)
>>
>>I inserted in /etc/nsswitch.conf
>> passwd: files winbind
>> group:  files winbind
>> shadow: files winbind nis
>>to activate winbind. I have not changed anything in PAM because I only
>>   =20
>>
>need
> =20
>
>>Domain Users
>>to access Win-Shares, not to login or anything else.
>>But with ... :
>> web1-50:~ # smbclient //web3-77/daten -U 300 -W foerde
>>i only get this output... :
>> added interface ip=3D150.10.30.50 bcast=3D150.10.30.255
>>   =20
>>
>nmask=3D255.255.255.0
> =20
>
>> added interface ip=3D10.1.110.20 bcast=3D10.1.110.255
>>   =20
>>
>nmask=3D255.255.255.0
> =20
>
>> Password: *****
>> Domain=3D[FOERDE] OS=3D[Unix] Server=3D[Samba 2.2.5]
>> tree connect failed: NT_STATUS_WRONG_PASSWORD
>>
>>Logfiles :
>>messages: nothing
>>log.winbind : nothing
>>log.smbd : nothing
>>log.nmbd : nothing
>>
>>With a wrong PW i get logentries "Error was
>>   =20
>>
>NT_STATUS_WRONG_PASSWORD."
> =20
>
>>which seems right. But nothing with right PW. Sadly no logon as well.
>>   =20
>>
>My
> =20
>
>>Testuser is "300",
>>as you can see i tryed some different syntax for user in smb.conf as
>>   =20
>>
>well as
> =20
>
>>in smbclient. No good.
>>
>>What am I doing wrong ? Especially because "wbinfo -a" works, I
>>   =20
>>
>thought I
> =20
>
>>was quite close.
>>But I didn't make any progress for days now..
>>What did I forget ?
>>
>>Please Help..
>>
>>Bj=F6rn Andersen
>>
>>
>>
>>
>>=20
>>
>>   =20
>>
>I've exactly the same problem. Did you receive any answer ?
>
>
> =20
>
Thx for your answer

btw the solution is to get rid of the line "valid users =3D %S" in smb.co=
nf...
--=20
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba