Winbind is part of the Samba suite and provides an NSS and PAM layer for Unix/Linux systems to integrate authentication with a Windows domain

learn more… | top users | synonyms

0
votes
0answers
15 views

Samba4 net join member fails

I'm trying to join a RHEL6 server using samba4 to a domain. Net ads join works correctly, join member does not however. Effectively wbinfo --getdcname does not work where as wbinfo --dsgetdcname does. ...
3
votes
1answer
78 views

Linux - How to control Winbind Authentication cache timeout

I have configured my linux machines (running CentOS 5.2) to authenticate against a Windows server running Active Directory. I have even enabled winbind offline logon. Everything works as expected, ...
0
votes
0answers
22 views

Exclude the user(s) from nss mapping

I have added a Linux machine to AD via samba 4. I've added the winbind to nsswitch mapping but it has turned out that there is a user root in the domain. I have workaround it in pam by pam_succeed_if ...
0
votes
0answers
33 views

How do I configure winbind to only register some interfaces with DDNS?

We are running an Active Directory. The hosts joined to the domain are a mix of Windows machines joined natively and Linux machines joined using winbind. All hosts have statically configured IP ...
0
votes
1answer
517 views

winbindd: kinit succeeded but ads_sasl_spnego_krb5_bind failed: Cannot contact any KDC for requested realm

While looking for reasons why logging in to a samba machines joined to Active Directory is slow I have the strong impression that the following error in my log file could be a hint. Apr 3 14:44:14 ...
0
votes
0answers
83 views

Apache + PAM + Winbind slow logins

Since upgrading our old Debian Lenny server to Ubuntu 12.04, we've noticed intermittent slow or failed access to Apache. Many or most web requests work fine, but occasionally, a Subversion client ...
5
votes
1answer
148 views

Linux machine is in a windows domain, but domain logon isn't working

We have a small network in our department 2 Win Server 2008 Domain Controller 1 debian webserver a number of win7 Clients My predecssor tried to add the webserver to our domain in order to login ...
1
vote
0answers
159 views

Linux nested groups with winbind

We have several RHEL6 servers connected to Active Directory using winbind. All servers are configured identically using a configuration management tool. Servers however produce different results when ...
0
votes
0answers
87 views

Samba 3.6.0 winbind module issues

All, I am having a winbind module load error on aix 7.1 trying to load winbind module for 3.6.0. methods.cfg: WINBIND: program_64 = /usr/lib/security/WINBIND_64 (have tried authonly ...
-1
votes
1answer
55 views

forcing winbind/samba to use single server

In a network, there are 2 AD servers. We are integrating samba and squid with AD for user authentication. Interestingly one of the servers does not allow us for enough security level. So we have to ...
0
votes
0answers
92 views

Speeding up Winbind group lookups?

I have an RHEL 6 server bound to an AD domain. Everything works fine but group lookups are extremely slow. Some lookups can take over 60 seconds. This is very painful when running sudo and when users ...
1
vote
0answers
29 views

pam_mount on CentOS 5 NOT working with Winbind

I used the instructions located here: Installing pam_mount on CentOS 5 However, when I add the pam_mount.so entries, and reboot the machine, I cannot log in. Each time I enter the login and press ...
2
votes
0answers
178 views

Authentization agains Samba4 domain controler and not working kinit

I've a problem with Samba 4 and Kerberos. If I call kinit, it writes Client not found in Kerberos database while getting initial credentials. I find out, that the Kerberos works with user name only, ...
2
votes
1answer
205 views

PAM Winbind Expired Password

We've got Winbind/Kerberos setup on RHEL for AD authentication. Working fine however I noticed that when a password has expired, we get a warning but shell access is still granted. What's the ...
1
vote
2answers
355 views

mounting windows shares on linux while keeping windows permissions

I have a windows share on a windows2003 server (WINJOE) which I want to back up to a Linux machine (LINUXJOE) that is properly joined to the domain. My goal is to backup shared folders of WINJOE to ...
0
votes
0answers
164 views

Cant login as User from trusted domain on Debian

My Problem is the following: I joined a Debian 7 machine to an AD 2012 domain (doma) and everything works inside that domain. But when I try to log on as a user from a trusted Domain (domb) I always ...
2
votes
1answer
1k views

Managing UID/GID of dual Samba / Winbind to AD

I have two Linux servers connected to an Active Directory Windows 2008 server using Samba/Winbind, and here is my samba config workgroup = COMPANY realm = COMPANY.COM server string = ...
1
vote
1answer
46 views

Samba need an ip of same network of Windows Active Directory to make the join?

Im working to setup samba in windows network. The goal is windows users from Active Direcotry uses their passwords to log in samba shares. I am not sure if, in this setup, AD server and Samba Server ...
1
vote
1answer
440 views

winbind separator and group name behavior in getent group, constantly changing

I have a problem that occasionally apprears-dissapears and it drives me nuts. My Debian servers are authenticated against AD and only "linuxadmins" group member can SSH to server and "sudo su". SSH ...
1
vote
0answers
89 views

Best way to bind multiple RHEL 6 Systems to AD and use NFS?

I am currently migrating systems to an AD domain using winbind. This works fine but I have discovered that NFS mounts don't have proper permissions because users and groups end up with different ...
0
votes
1answer
1k views

AD accounts on centos 6.4 not showing up despite successfull wbinfo -u

I have a centos 6.4 box with samba 3.6.9 which I have connected to MS server 2008 R2. That part seems to work fine, since I can see my AD users and groups with wbinfo -u and wbinfo -g. What does not ...
0
votes
1answer
156 views

Samba/winbind to AD - the userid mapping

Guys I got issue with UID mapping from my AD. I got Centos 5.5 x64 box and AD witk 2k8 Windows Server. The problem is with username mapping. Example: getent passwd ...
1
vote
1answer
633 views

CentOS 6 Unable to Resolve One AD Account

I have a problem that has got me going round in circles. We have 14 Centos 6 AD integrated servers using Samba/Winbind with idmap_ad (security = ads, idmap backend = ad), this setup is running ...
1
vote
1answer
1k views

Linux PAM pam_succeed_if.so

I've specified an AD security group in PAM to restrict which domain users can login. I've also restricted sessions for AD users to this group. This prevents a logged in user from doing an "su -" to ...
2
votes
1answer
1k views

solved - SSH instant logout after ssh login kerberos / winbind

I set up a ubuntu server which is authenticating against the active directory of our W2k8 Domain. Everything went well and I see all the users in getent passwd, and wbinfo. I want to be able to use ...
0
votes
1answer
1k views

Samba/Winbind: adding domain users to local groups based on domain group

I have a Redhat ES 6 server that's successfully joined to a domain via Winbind (i.e. I can login to the Redhat server using domain credentials with no issues). What I'm looking to do at this point is ...
0
votes
4answers
1k views

Samba Winbind User Resolution

We have successfully deployed AD authentication using Samba and Winbind (idmap_ad) across six Centos 6 servers and have been running happily for a few months now. One of the servers has stopped ...
-1
votes
1answer
145 views

ubuntu server name resolution order

I am using LAMP on Ubuntu server, and I need to query MSSQL database on Windows XP machine, both on the same network. I use winbind to resolve SMB hostnames. My problem is name resolution order. It ...
0
votes
1answer
2k views

How to use Active Directory's homeDirectory attribute for Samba?

I currently have a Samba share setup where I would like to share Unix folders with Windows users, with Active directory as the backend. I see that there is an attribute called homeDirectory in Active ...
1
vote
0answers
100 views

Winbind info shows local users that do not exist

I am setting up Samba on a Linux machine running CentOS 6 (called localhost, and the AD computer I am connecting to is dc.companyname.com), and I have done everything successfully, except when I type ...
0
votes
1answer
446 views

Variables are not expanded in smb.conf when using Samba 4

I'm using Samba 4.0.0beta2 on Debian Wheezy as Active Directory domain controller. I also use winbind in my /etc/nsswitch.conf so getent passwd returns domain users. I've set template homedir = ...
1
vote
1answer
480 views

Restrict su to domain user in Winbind/Kerberos Linux AD integration

We've got some RHEL 5 servers joined to AD using Winbind/Kerberos which is working well overall. I've specified an AD security group in PAM to restrict which domain users can login. auth ...
2
votes
0answers
361 views

Group membership erratically lost after user logs in - Ubuntu, winbind, AD

I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
0
votes
2answers
103 views

Logging into Linux server gives users 'domain users' for default group can it be changed?

I recently attached a RHEL 5 test box to our active directory server to try and get all of our users to not have to remember so many passowrds. I'm using winbind and samba and everything seems to be ...
4
votes
2answers
1k views

Active directory integration not working properly with winbind and samba

I'm trying to get my linux box to use active directory authentication. I believe I have almost everything setup correctly. I'm able to issue wbinfo -g and wbinfo -u and see all the groups and users ...
0
votes
2answers
350 views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
0
votes
1answer
540 views

LAN queries not resolved in BIND

I have a public url like app1.wifi.com,so that I can access my url from anywhere. Now I want to set that same url to my local machine. If I type app1.wifi.com from my LAN, it should routed to local ...
4
votes
1answer
782 views

Import Active Directory users into Unix/Linux/FreeBSD group

I need to have FreeBSD 8.2 RELEASE p9 (running FreeNAS) import or associate Active Directory users (or Security Group) with a Unix/FreeBSD group. This way I can use FreeBSD group(s) security on a ...
-3
votes
1answer
118 views

Winbind dont start when secutiry = ads

I have samba and Winbind over ubuntu server with the following smb.conf [global] ## Browsing/Identification ### # Change this to the workgroup/NT-domain name your Samba server will part of ...
4
votes
2answers
507 views

Samba/Winbind issues joing to Active directory domain

I'm currently in the process of setting up winbind/samba and getting a few issues. I can test connectivity with wbinfo fine: [root@buildmirror ~]# wbinfo -u hostname username administrator guest ...
0
votes
1answer
708 views

debian hang on startup “starting the winbind daemon: winbind”

I took a copy of a VM running a debian, just so that I can play around with it. I spin up the copy, but didn't give it any network connection to avoid conflict with the original one. However, when I ...
3
votes
1answer
943 views

Linux with winbind, disable local users while AD is available?

Routers and switches with RADIUS authentication can be configured such that login is disabled for locally configured users as long as the RADIUS server is available. If the RADIUS server becomes ...
0
votes
1answer
3k views

Ubuntu + AD; Failed to join domain: failed to set machine spn: Constraint violation

I'm attempting to join a Ubuntu 12.04 server to Active Directory. I installed samba, and kb5-user, created a machine account in AD, and did: > net ads testjoin Join is OK So far so good. Then I ...
0
votes
1answer
295 views

On Solaris, how to log IP when using winbind auth and invalid user?

This is on Solaris 10 sparc platform. I'm trying to make our denyhosts script block the dictionary ssh attacks. Unfortunately, the logging does not show an IP when the user name is invalid. We are ...
2
votes
1answer
332 views

Joining Linux cloned VM to Active directory

Joining Linux host to Windows AD is widely documented.However I struggle to find any guides or best practices on how to join Linux clones that were already members of the domain. Naturally things ...
1
vote
1answer
1k views

pam_mount of smb share on rhel6, home directory not available for login - probably SELinux?

I'm using the Fedora 12 pam_mount / libHX RPMs on a RHEL 6 x86_64 system to automatically mount home directories from a NetApp system configured with NTFS-only security AD-bound logins work fine - ...
0
votes
0answers
487 views

CentOS 6 Automatic Join Domain

I have spent days working on setting up this server and have one last task to solve. I've set my CentOS 6 server to autologin and I need to find a way to get it to auto join the domain and then start ...
6
votes
2answers
683 views

How do Active Directory domain joined computers (native MS Windows or Linux with winbind) determine the closest password server?

How do Active Directory domain joined computers (native MS Windows or Linux with winbind) determine the closest password server? This question implies a cluster with 2+ Active Directory servers in ...
2
votes
1answer
221 views

Bringing Linux Accounts in Active Directory

I'm trying to centralize user login information via Active Directory. Currently I have AD running on Server 2008 R2. I do have Identity Management for UNIX installed on it. I also have a few Linux ...
3
votes
1answer
2k views

winbind from samba 3.6.3 on Linux works but does not integrate with OS?

Successfully compiled and installed the latest version of samba. Started winbindd and the following diagnostic commands work: wbinfo -p, wbinfo -c, net ads testjoin, etc... However! when using ...