Winbind is part of the Samba suite and provides an NSS and PAM layer for Unix/Linux systems to integrate authentication with a Windows domain

learn more… | top users | synonyms

0
votes
0answers
17 views

Set up Samba with Active Directory and local user authentication

My main goal is to set up a Samba-Server, to where users can connect to by using their Active-Directory credentials. Additionally, local linux users on the Samba-Server should be able to authenticate. ...
0
votes
1answer
40 views

winbindd gss_init_sec_context failed with [Unspecified GSS failure]

Running CentOS7. Every hour I get the same error message. I have no problems authentication. I believe there is a Redhat solution but I don't have subscription. https://access.redhat.com/solutions/...
0
votes
0answers
13 views

Restrict access to Linux via PAM with configured SSO

i have SLES 12 in Active Directory Domain. Single Sign On for SSH is configured. I want to allow access to server only to some AD groups via PAM (not only for SSH Service, ftp, etc.). I tried to add ...
0
votes
0answers
16 views

OpenVPN authentication using pam_winbind

I'm running an OpenVPN Server on a Debian machine joined to my Active Directory Domain. I'd like to use pam_winbind for VPN authentication. This is where the troubles arise. Authentication is working ...
1
vote
0answers
15 views

Easier method of setting up Winbind auth in LMDE?

Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e....
0
votes
0answers
22 views

CentOS 7 group permissions not allowing access to folder

I have a CentOS7 box, "box1", domain joined using Winbind + RID method. I have a folder (NFS mount) @ /shares/share. The permissions are: root@box1:/shares# ls -n /shares/ total 8 drwxrws--- 2 0 ...
0
votes
0answers
22 views

Winbind locks up useradd and userdel

Running userdel or useradd locks up on one of our AD-connected Debian 8 machines. ┌[root][machine]:/ └$ useradd -p "superdupersecret" peter While this command is blocking one can observe how ...
1
vote
1answer
126 views

Inconsistent winbind info on Samba 4 AD domain controller

I've setup a Samba 4 AD domain controller on Debian Jessie (samba 4.2.10). Everything's working fine, except that winbind gives wrong user/group information. I have a sample user "testuser" and a ...
0
votes
1answer
39 views

Resolve NetBIOS names without full qualification

I am connected to my office VPN and I can successfully RDP into my computer using the fully qualified name for it PC00001.myofficevpn.plc. When I try to connect using only the hostname PC00001, I do ...
0
votes
0answers
83 views

How to join a linux host to a Samba4 active directory

I have been attempting to coerce a pair of linux domain members to a Samba4 active directory. Although I have numerous niggles and unanswered questions raised during the setup, there are currently ...
0
votes
0answers
41 views

Mounting samba directory changes all file permissions to user who mounted it

I have a xubuntu 14.04 client, a debian 8 Samba File server and an external Active Directory service. I log in as user1 on the client authenticating against the ADS with winbind. My home directory /...
3
votes
1answer
241 views

wbinfo -u does not show AD users (is empty)

We have a problem on a Ubuntu Server 14.04 (fileserver) connected to AD on a Windows Server 2008 R2 using Samba (version 4.3.8)/WinBind and Kerberos. The problem is that users do not have writing ...
0
votes
0answers
67 views

AD authentication on Centos7

I set my configuration on centos 6 and it works but when I pushed it on centos 7 it doesn't work. Here is my configuration : # authconfig --test caching is disabled nss_files is always enabled ...
1
vote
2answers
56 views

Initialise Kerberos ticket on ssh login using PAM

Right, so I am struggling a bit with PAM in Centos7. I have no idea how to configure it manually and make the changes permanent so that I get a kerberos ticket after a successful ssh login. The ...
-1
votes
1answer
115 views

Samba file server as domain member: error when joining domain

I would like to set up samba 4 to share a local directory, so that domain users are allowed to mount the directory. I don't want domain users to be able to log in the linux machine, they should only ...
0
votes
1answer
183 views

Groupmapping does not work for AD groups

We have an ActiveDirectory where we get our users from. So authentication on the linux machine works over pam. We managed this part to work so far, but we need all users to be part of the local group ...
1
vote
0answers
88 views

Random SSH connection timeout on first try to CentOS servers

Have got a curious issue with SSH on CentOS 6 and haven't found a solution yet. We have our CentOS 6 servers all joined to an Active Directory 2012 R2 domain using Winbind. It is not used for ...
0
votes
0answers
96 views

Samba “force user” issue with AD Integration

I'm trying to connect from a windows client to a samba share on linux. The linux server could be successfully joined to AD. Authentication with "valid users = @DOMAIN\windowsgroup" also works ...
3
votes
2answers
53 views

linux - windows ad authentication - why join domain?

When using Windows AD to authenticate users on Linux servers is there an advantage to using Winbind and "Joining the Domain" over just authenticating via Kerberos and looking up UID,GID, home dir, etc ...
1
vote
0answers
180 views

Winbind forgets who I am

On one of our Ubuntu 14.04 servers, running Winbind 4.1.6+dfsg-1ubuntu2.14.04.9, Winbind periodically forgets who I am, resulting in strange errors like ssh aborting with an "unknown uid" error ...
0
votes
0answers
532 views

Output from “wbinfo --user-groups USER” and “wbinfo --group-info GROUP” do not match

I am using Red Hat Enterprise Linux Server release 6.7 with winbindd/smbd version 3.6.23-20.0.1.el6. I created some new AD groups and added existing users. I used this command: wbinfo --group-info &...
2
votes
0answers
65 views

Samba doesn't seem to stay joined to Active Directory domain [closed]

I can initially join a linux box to the domain with these commands: sudo kinit administrator@WINDOWS.CORP.SPRINGVENTUREGROUP.COM sudo net ads join -k After a few hours or the next day, this ...
0
votes
0answers
106 views

How can I use winbind to return a filter-id based on group membership?

I have a couple of FreeRadius 3.0.9 servers which were just put into production on our Meraki network. We want to use user group membership in Active Directory to determine policy to be carried out by ...
1
vote
0answers
42 views

Apache NTLM not authenicating domain username/password.

I have a centos box and I am trying to setup NTLM authenication for apache. I have the linux box on the AD domain already and able to get user and group info using the wbinfo command. I have the ...
0
votes
0answers
7 views

Winbind increase idmap range

i have a computing cluster running and use likewise for connecting all machines to the AD. I want to add new machines using ldapsam. My issue is, that it seems to only offer idmap ranges from "idmap ...
1
vote
1answer
97 views

Removing a “semi joined” Ubuntu workstation from an Active Directory domain

I am joining an Ubuntu workstation to an MS AD. I had 1 or 2 config issues when I first tried to run net ads join which resulted in an error message and the workstation not being added correctly I ...
0
votes
2answers
657 views

Cross domain - AD group membership changes not reflected in winbind

I have similar cases on this thread at AD group membership changes not reflected in winbind information. The only difference is that this only occurs on "cross domain" for my scenario. Here is my ...
2
votes
1answer
515 views

Winbind not enumerating users and groups of trusted domain

I'm using Samba 4.1.6-Ubuntu in Ubuntu 14.04, for authenticating users from two domains with a one-way cross-forest trust between them. Samba machine is joined to DOMAINA, while DOMAINB is the trusted ...
1
vote
0answers
431 views

Create and Manage Windows NFS Shares for Linux Clients with AD Authentication

I have a Windows file server that I would like to create NFS shares on. These shares need to be accessible by both Windows 7 domain clients and Linux clients (Red Hat 5 & 6) using Samba/Winbind ...
1
vote
1answer
1k views

'realm join --client-software sssd' on centos-7 joins two realms (one with sssd and one with winbind)

On clean installed centos-7 host: realm join -U foo --client-software sssd AD.EXAMPLE.COM After running realm list output looks initially like this: AD.EXAMPLE.COM type: kerberos realm-name: ...
1
vote
1answer
982 views

Ubuntu 14.04 Active Directory auth fails after static ip config

I'm having 6 Ubuntu 14.04 servers that are joined to active directory (2003 domain functional level 2008r2 schema) All of the servers work's fine when network interface is configured to use DHCP. But ...
1
vote
1answer
481 views

Fedora 21 as an AD member suddenly stopped working

I had my Fedora 21 workstation connected to my AD domain and working for about a month and all was well and then I came in one morning and couldn't login. My initial response was blaming Win2013 and ...
1
vote
0answers
92 views

winbind needs to be restarded after boot

Environment: Centos 6.6 Samba 3.6.23-12.el6 I have succesfully connected the server to an Active Directory Domain and I have configured it as a Samba File Server. It works fine as long as I reboot, ...
2
votes
0answers
139 views

Samba Shares Without Using Winbind

I am curious if it is possible to use samba shares without using winbind. In our current environment we are using SSSD, Kerberos, and Samba to complete the required tasks such as joining the windows ...
1
vote
0answers
473 views

AD Authentication with SAMBA, Winbind and SSS

I'm having trouble authentication with AD to a SAMBA share on a linux server. Authentication appears to be working, but only halfway... [root@myserver ~]# wbinfo -a my_ad_user%password123 ...
4
votes
0answers
333 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
1
vote
1answer
3k views

Winbind Centos wrong UID/GID

Here's the scenario: I have two machine: Ubuntu, running ldap to authencticate users CentOs, uses winbind to authenticate users to mount homedirs I use fstab and nfs shares. The problem is this: ...
0
votes
1answer
1k views

Samba authenticates users, but does not reply

Sometimes the samba 4.1.11 stops serving the clients. Every day, I have to restart the smbd just to get this fixed. The windows clients say, that the shared device is unreachable or the authentication ...
2
votes
1answer
578 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
1
vote
0answers
485 views

after upgrade to winbind 3.6.24 the NT users cannot login into my RHEL4 box

I upgraded winbind/samba from 3.0.33 to 3.6.24 in a 32-bit RHEL4 box. The problem now is that any NT user cannot login. The error message found in /var/log/messages is Sep 3 09:05:20 node2 sshd[...
1
vote
1answer
10k views

Samba4 net join member fails

I'm trying to join a RHEL6 server using samba4 to a domain. Net ads join works correctly, join member does not however. Effectively wbinfo --getdcname does not work where as wbinfo --dsgetdcname does. ...
3
votes
1answer
3k views

Linux - How to control Winbind Authentication cache timeout

I have configured my linux machines (running CentOS 5.2) to authenticate against a Windows server running Active Directory. I have even enabled winbind offline logon. Everything works as expected, ...
2
votes
2answers
8k views

winbindd: kinit succeeded but ads_sasl_spnego_krb5_bind failed: Cannot contact any KDC for requested realm

While looking for reasons why logging in to a samba machines joined to Active Directory is slow I have the strong impression that the following error in my log file could be a hint. Apr 3 14:44:14 ...
1
vote
0answers
415 views

Apache + PAM + Winbind slow logins

Since upgrading our old Debian Lenny server to Ubuntu 12.04, we've noticed intermittent slow or failed access to Apache. Many or most web requests work fine, but occasionally, a Subversion client ...
6
votes
2answers
4k views

Linux machine is in a windows domain, but domain logon isn't working

We have a small network in our department 2 Win Server 2008 Domain Controller 1 debian webserver a number of win7 Clients My predecssor tried to add the webserver to our domain in order to login ...
1
vote
2answers
6k views

Linux nested groups with winbind

We have several RHEL6 servers connected to Active Directory using winbind. All servers are configured identically using a configuration management tool. Servers however produce different results when ...
-1
votes
1answer
190 views

forcing winbind/samba to use single server

In a network, there are 2 AD servers. We are integrating samba and squid with AD for user authentication. Interestingly one of the servers does not allow us for enough security level. So we have to ...
0
votes
0answers
476 views

Speeding up Winbind group lookups?

I have an RHEL 6 server bound to an AD domain. Everything works fine but group lookups are extremely slow. Some lookups can take over 60 seconds. This is very painful when running sudo and when users ...
1
vote
0answers
65 views

pam_mount on CentOS 5 NOT working with Winbind

I used the instructions located here: Installing pam_mount on CentOS 5 However, when I add the pam_mount.so entries, and reboot the machine, I cannot log in. Each time I enter the login and press ...
2
votes
0answers
522 views

Authentization agains Samba4 domain controler and not working kinit

I've a problem with Samba 4 and Kerberos. If I call kinit, it writes Client not found in Kerberos database while getting initial credentials. I find out, that the Kerberos works with user name only, ...