Winbind is part of the Samba suite and provides an NSS and PAM layer for Unix/Linux systems to integrate authentication with a Windows domain
-2
votes
0answers
26 views
Linux mail server allowing users access by windows clients without entering password [closed]
I have long been trying to solve a problem but I could not.
I want to install a linux mail server allowing users access by by windows clients without entering password.
I tried with a combination of ...
0
votes
0answers
15 views
Samba4 compiled from source alongside winbind repo package, not working with PAM
I am on Linux Mint. I have compiled and installed Samba4 from source and joined a Samba4 DC I have elsewhere on my network. I have also been trying to get Samba/winbind to work with PAM to ...
0
votes
0answers
46 views
Windows AD <-> Unix UID/GID mapping using winbind - idmap_ad?
We have the following setup:
Windows 2012 Server as PDC
some Linux machines, users should be authenticated against AD
Debian Wheezy
winbindd 3.6.6
Now I have to chose the right way to handle the ...
1
vote
1answer
100 views
CentOS 6 Unable to Resolve One AD Account
I have a problem that has got me going round in circles.
We have 14 Centos 6 AD integrated servers using Samba/Winbind with idmap_ad (security = ads, idmap backend = ad), this setup is running ...
1
vote
1answer
133 views
Linux PAM pam_succeed_if.so
I've specified an AD security group in PAM to restrict which domain users can login. I've also restricted sessions for AD users to this group. This prevents a logged in user from doing an "su -" to ...
2
votes
1answer
247 views
solved - SSH instant logout after ssh login kerberos / winbind
I set up a ubuntu server which is authenticating against the active directory of our W2k8 Domain. Everything went well and I see all the users in getent passwd, and wbinfo.
I want to be able to use ...
0
votes
1answer
303 views
Samba/Winbind: adding domain users to local groups based on domain group
I have a Redhat ES 6 server that's successfully joined to a domain via Winbind (i.e. I can login to the Redhat server using domain credentials with no issues).
What I'm looking to do at this point is ...
0
votes
4answers
88 views
Samba Winbind User Resolution
We have successfully deployed AD authentication using Samba and Winbind (idmap_ad) across six Centos 6 servers and have been running happily for a few months now.
One of the servers has stopped ...
-1
votes
1answer
66 views
ubuntu server name resolution order
I am using LAMP on Ubuntu server, and I need to query MSSQL database on Windows XP machine, both on the same network. I use winbind to resolve SMB hostnames. My problem is name resolution order. It ...
0
votes
1answer
590 views
How to use Active Directory's homeDirectory attribute for Samba?
I currently have a Samba share setup where I would like to share Unix folders with Windows users, with Active directory as the backend. I see that there is an attribute called homeDirectory in Active ...
1
vote
0answers
76 views
Winbind info shows local users that do not exist
I am setting up Samba on a Linux machine running CentOS 6 (called localhost, and the AD computer I am connecting to is dc.companyname.com), and I have done everything successfully, except when I type
...
0
votes
1answer
246 views
Variables are not expanded in smb.conf when using Samba 4
I'm using Samba 4.0.0beta2 on Debian Wheezy as Active Directory domain controller. I also use winbind in my /etc/nsswitch.conf so getent passwd returns domain users.
I've set
template homedir = ...
1
vote
1answer
226 views
Restrict su to domain user in Winbind/Kerberos Linux AD integration
We've got some RHEL 5 servers joined to AD using Winbind/Kerberos which is working well overall.
I've specified an AD security group in PAM to restrict which domain users can login.
auth ...
2
votes
0answers
158 views
Group membership erratically lost after user logs in - Ubuntu, winbind, AD
I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
0
votes
0answers
221 views
winbind trusted domain shows as offline
I have setup winbind on CentOS 6.3 following the steps outlined in the CentOS wiki and successfully joined the primary domain.
ssh and su works for users in this domain as well as wbinfo -a. Running ...
0
votes
2answers
79 views
Logging into Linux server gives users 'domain users' for default group can it be changed?
I recently attached a RHEL 5 test box to our active directory server to try and get all of our users to not have to remember so many passowrds. I'm using winbind and samba and everything seems to be ...
4
votes
2answers
617 views
Active directory integration not working properly with winbind and samba
I'm trying to get my linux box to use active directory authentication. I believe I have almost everything setup correctly. I'm able to issue wbinfo -g and wbinfo -u and see all the groups and users ...
0
votes
2answers
177 views
pam auth via winbind, howto map primary group for users?
I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data).
users have the group "domain users" with gid 10006 (as ...
0
votes
1answer
433 views
LAN queries not resolved in BIND
I have a public url like app1.wifi.com,so that I can access my url from anywhere. Now I want to set that same url to my local machine. If I type app1.wifi.com from my LAN, it should routed to local ...
4
votes
1answer
498 views
Import Active Directory users into Unix/Linux/FreeBSD group
I need to have FreeBSD 8.2 RELEASE p9 (running FreeNAS) import or associate Active Directory users (or Security Group) with a Unix/FreeBSD group. This way I can use FreeBSD group(s) security on a ...
-3
votes
1answer
98 views
Winbind dont start when secutiry = ads
I have samba and Winbind over ubuntu server with the following smb.conf
[global]
## Browsing/Identification ###
# Change this to the workgroup/NT-domain name your Samba server will part of
...
3
votes
1answer
363 views
Samba/Winbind issues joing to Active directory domain
I'm currently in the process of setting up winbind/samba and getting a few issues.
I can test connectivity with wbinfo fine:
[root@buildmirror ~]# wbinfo -u
hostname username
administrator
guest
...
0
votes
1answer
306 views
debian hang on startup “starting the winbind daemon: winbind”
I took a copy of a VM running a debian, just so that I can play around with it. I spin up the copy, but didn't give it any network connection to avoid conflict with the original one. However, when I ...
3
votes
1answer
652 views
Linux with winbind, disable local users while AD is available?
Routers and switches with RADIUS authentication can be configured such that login is disabled for locally configured users as long as the RADIUS server is available. If the RADIUS server becomes ...
0
votes
1answer
1k views
Ubuntu + AD; Failed to join domain: failed to set machine spn: Constraint violation
I'm attempting to join a Ubuntu 12.04 server to Active Directory. I installed samba, and kb5-user, created a machine account in AD, and did:
> net ads testjoin
Join is OK
So far so good. Then I ...
0
votes
1answer
191 views
On Solaris, how to log IP when using winbind auth and invalid user?
This is on Solaris 10 sparc platform.
I'm trying to make our denyhosts script block the dictionary ssh attacks.
Unfortunately, the logging does not show an IP when the user name is invalid.
We are ...
2
votes
1answer
183 views
Joining Linux cloned VM to Active directory
Joining Linux host to Windows AD is widely documented.However I struggle to find any guides or best practices on how to join Linux clones that were already members of the domain.
Naturally things ...
1
vote
1answer
933 views
pam_mount of smb share on rhel6, home directory not available for login - probably SELinux?
I'm using the Fedora 12 pam_mount / libHX RPMs on a RHEL 6 x86_64 system to automatically mount home directories from a NetApp system configured with NTFS-only security
AD-bound logins work fine - ...
0
votes
0answers
404 views
CentOS 6 Automatic Join Domain
I have spent days working on setting up this server and have one last task to solve. I've set my CentOS 6 server to autologin and I need to find a way to get it to auto join the domain and then start ...
6
votes
2answers
489 views
How do Active Directory domain joined computers (native MS Windows or Linux with winbind) determine the closest password server?
How do Active Directory domain joined computers (native MS Windows or Linux with winbind) determine the closest password server? This question implies a cluster with 2+ Active Directory servers in ...
2
votes
1answer
189 views
Bringing Linux Accounts in Active Directory
I'm trying to centralize user login information via Active Directory. Currently I have AD running on Server 2008 R2. I do have Identity Management for UNIX installed on it. I also have a few Linux ...
3
votes
1answer
1k views
winbind from samba 3.6.3 on Linux works but does not integrate with OS?
Successfully compiled and installed the latest version of samba.
Started winbindd and the following diagnostic commands work:
wbinfo -p, wbinfo -c, net ads testjoin, etc...
However! when using ...
0
votes
0answers
321 views
Fedora join to AD DS (svr 2008): NT_STATUS_INVALID_COMPUTER_NAME
I have been attempting to join my Fedora machine to my 2008 AD DS domain (testdomain.lcl) for some time now. I have followed this article:
http://weblog.bignerdranch.com/?p=6
But with no luck. I ...
0
votes
2answers
353 views
Win Server 2008 force kerberos setting
I am currently facing the problem that a linux machine running Ubuntu 10.04 LTS with samba and winbindd installed is unable to join a Domain, that is managed by a Windows 2008 DC.
The linux config, ...
3
votes
1answer
429 views
Logging on as root without winbind timeouts
How can I set up my Linux box so that, if the Active Directory domain controller is down, I can still log in as root, without any timeouts or delays?
Following the example of most of the ...
1
vote
0answers
83 views
Domain logon with Linux
I've set up Samba and winbind, and everything is working fine. I can see all AD users and groups, and corresponding relationships. I've also set up PAM authentication successfully. I have a local user ...
0
votes
1answer
125 views
Configure winbind to check multiple attributes in AD?
I have winbind up and running and it is working well for authentication.
When a user is prompted at logon to provide credentials what AD attribute is username checked against? Is it name? ...
2
votes
1answer
368 views
CentOS 6 Gnome login immediately logs me out
Have a strange issue on freshly installed CentOS 6, with Samba Windows 2008 R2 authentication.
The login succeeds, and even the home directory created, but then I'm thrown back to the login scren ...
2
votes
1answer
468 views
vsftpd with pam_winbind.so
I'm trying to setup vsftpd to use logins from our domain. I want the ftp users to be able to login using their active directory username/password and have be able to have full access to ...
4
votes
1answer
1k views
Linux computer (Debian) in a Windows Active Directory Domain, Administrator of AD should have root permission after login
I managed to join my Debian machine (Squeeze) to an existing Active Directory (MS Windows 2008 R2 Server). Everything works fine, I can login using accounts from the Active Directory (NTP, Kerberos, ...
0
votes
3answers
157 views
OpenSUSE 11 AD auth works, but not netbios
I've setup a desktop machine with OpenSUSE 11.4 and have Active Directory authentication working properly. I can ping, rdp and ssh to'/from other machines. I can access windows shares from OpenSUSE ...
0
votes
1answer
843 views
Authentication failure of OpenVPN client against Active Directory
I'm getting the following error (client side) when connecting to my OpenVPN server:
AUTH: Received AUTH_FAILED control message
and on the server I get thefollowing error message in teh openvpn ...
1
vote
1answer
882 views
saslauthd and PAM: “Too many open files” error - saslauthd restart fixes this - what is wrong?
I have a Postfix mail server running Debian Squeeze. SASL authentication for secure SMTP is supported by saslauthd which relies on pam, which relies on winbind.
This pattern seems to be reoccuring ...
4
votes
5answers
2k views
Linux authentication via ADS — allowing only specific groups in PAM
I'm taking the samba / winbind / PAM route to authenticate users on our linux servers from our Active Directory domain.
Everything works, but I want to limit what AD groups are allowed to ...
1
vote
2answers
470 views
Winbind/AD: Local users with identical AD usernames
We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
3
votes
1answer
429 views
Best Management Practices for using Winbind?
I'm planning on migrating a few of our Linux servers to use AD authentication via SAMBA/Winbind. Operating system will be openSUSE 11.3 x64. Our AD environment does not have UNIX extensions ...
0
votes
0answers
652 views
winbind failing after a semi-random amount of time
I have winbind set up to authenticate to our AD for samba shares. This is the third such server, and the only one having any issues. It seems after a random amount of time samba shares will just stop ...
1
vote
2answers
1k views
Solaris 10: winbind can't connect to Active Directory
Goal: join a Solaris 10 machine to an existing Active Directory.
Steps I did:
Installed software (Samba 3.4.2 from http://www.sunfreeware.com)
Received a Kerberos ticket with kinit ...
1
vote
2answers
1k views
Configure Winbind to get User Info from Windows
I need to configure SAMBA and Winbind on Ubuntu 10.04.1 clients to get their UID, GID, and home directory from Windows Active Directory.
I have Windows Services for Unix installed with the relevant ...
0
votes
1answer
1k views
winbind and squid problem
I've have squid configured with auth in the AD via winbind
now I have wired problems with authorisation
I found in the logs interesting string
kinit succeeded but ads_sasl_spnego_krb5_bind failed: ...
