0
votes
1answer
21 views

winbindd: kinit succeeded but ads_sasl_spnego_krb5_bind failed: Cannot contact any KDC for requested realm

While looking for reasons why logging in to a samba machines joined to Active Directory is slow I have the strong impression that the following error in my log file could be a hint. Apr 3 14:44:14 ...
2
votes
0answers
46 views

Linux machine is in a windows domain, but domain logon isn't working

We have a small network in our department 2 Win Server 2008 Domain Controller 1 debian webserver a number of win7 Clients My predecssor tried to add the webserver to our domain in order to login ...
1
vote
0answers
35 views

Linux nested groups with winbind

We have several RHEL6 servers connected to Active Directory using winbind. All servers are configured identically using a configuration management tool. Servers however produce different results when ...
0
votes
0answers
41 views

Samba 3.6.0 winbind module issues

All, I am having a winbind module load error on aix 7.1 trying to load winbind module for 3.6.0. methods.cfg: WINBIND: program_64 = /usr/lib/security/WINBIND_64 (have tried authonly ...
-1
votes
1answer
43 views

forcing winbind/samba to use single server

In a network, there are 2 AD servers. We are integrating samba and squid with AD for user authentication. Interestingly one of the servers does not allow us for enough security level. So we have to ...
0
votes
0answers
53 views

Speeding up Winbind group lookups?

I have an RHEL 6 server bound to an AD domain. Everything works fine but group lookups are extremely slow. Some lookups can take over 60 seconds. This is very painful when running sudo and when users ...
1
vote
2answers
204 views

mounting windows shares on linux while keeping windows permissions

I have a windows share on a windows2003 server (WINJOE) which I want to back up to a Linux machine (LINUXJOE) that is properly joined to the domain. My goal is to backup shared folders of WINJOE to ...
0
votes
0answers
122 views

Cant login as User from trusted domain on Debian

My Problem is the following: I joined a Debian 7 machine to an AD 2012 domain (doma) and everything works inside that domain. But when I try to log on as a user from a trusted Domain (domb) I always ...
2
votes
1answer
685 views

Managing UID/GID of dual Samba / Winbind to AD

I have two Linux servers connected to an Active Directory Windows 2008 server using Samba/Winbind, and here is my samba config workgroup = COMPANY realm = COMPANY.COM server string = ...
1
vote
1answer
39 views

Samba need an ip of same network of Windows Active Directory to make the join?

Im working to setup samba in windows network. The goal is windows users from Active Direcotry uses their passwords to log in samba shares. I am not sure if, in this setup, AD server and Samba Server ...
0
votes
1answer
135 views

Samba/winbind to AD - the userid mapping

Guys I got issue with UID mapping from my AD. I got Centos 5.5 x64 box and AD witk 2k8 Windows Server. The problem is with username mapping. Example: getent passwd ...
1
vote
1answer
467 views

CentOS 6 Unable to Resolve One AD Account

I have a problem that has got me going round in circles. We have 14 Centos 6 AD integrated servers using Samba/Winbind with idmap_ad (security = ads, idmap backend = ad), this setup is running ...
0
votes
1answer
911 views

Samba/Winbind: adding domain users to local groups based on domain group

I have a Redhat ES 6 server that's successfully joined to a domain via Winbind (i.e. I can login to the Redhat server using domain credentials with no issues). What I'm looking to do at this point is ...
0
votes
4answers
503 views

Samba Winbind User Resolution

We have successfully deployed AD authentication using Samba and Winbind (idmap_ad) across six Centos 6 servers and have been running happily for a few months now. One of the servers has stopped ...
0
votes
1answer
2k views

How to use Active Directory's homeDirectory attribute for Samba?

I currently have a Samba share setup where I would like to share Unix folders with Windows users, with Active directory as the backend. I see that there is an attribute called homeDirectory in Active ...
1
vote
0answers
95 views

Winbind info shows local users that do not exist

I am setting up Samba on a Linux machine running CentOS 6 (called localhost, and the AD computer I am connecting to is dc.companyname.com), and I have done everything successfully, except when I type ...
0
votes
1answer
390 views

Variables are not expanded in smb.conf when using Samba 4

I'm using Samba 4.0.0beta2 on Debian Wheezy as Active Directory domain controller. I also use winbind in my /etc/nsswitch.conf so getent passwd returns domain users. I've set template homedir = ...
0
votes
2answers
99 views

Logging into Linux server gives users 'domain users' for default group can it be changed?

I recently attached a RHEL 5 test box to our active directory server to try and get all of our users to not have to remember so many passowrds. I'm using winbind and samba and everything seems to be ...
4
votes
2answers
1k views

Active directory integration not working properly with winbind and samba

I'm trying to get my linux box to use active directory authentication. I believe I have almost everything setup correctly. I'm able to issue wbinfo -g and wbinfo -u and see all the groups and users ...
4
votes
1answer
701 views

Import Active Directory users into Unix/Linux/FreeBSD group

I need to have FreeBSD 8.2 RELEASE p9 (running FreeNAS) import or associate Active Directory users (or Security Group) with a Unix/FreeBSD group. This way I can use FreeBSD group(s) security on a ...
-3
votes
1answer
113 views

Winbind dont start when secutiry = ads

I have samba and Winbind over ubuntu server with the following smb.conf [global] ## Browsing/Identification ### # Change this to the workgroup/NT-domain name your Samba server will part of ...
3
votes
1answer
466 views

Samba/Winbind issues joing to Active directory domain

I'm currently in the process of setting up winbind/samba and getting a few issues. I can test connectivity with wbinfo fine: [root@buildmirror ~]# wbinfo -u hostname username administrator guest ...
2
votes
1answer
289 views

Joining Linux cloned VM to Active directory

Joining Linux host to Windows AD is widely documented.However I struggle to find any guides or best practices on how to join Linux clones that were already members of the domain. Naturally things ...
1
vote
1answer
1k views

pam_mount of smb share on rhel6, home directory not available for login - probably SELinux?

I'm using the Fedora 12 pam_mount / libHX RPMs on a RHEL 6 x86_64 system to automatically mount home directories from a NetApp system configured with NTFS-only security AD-bound logins work fine - ...
6
votes
2answers
641 views

How do Active Directory domain joined computers (native MS Windows or Linux with winbind) determine the closest password server?

How do Active Directory domain joined computers (native MS Windows or Linux with winbind) determine the closest password server? This question implies a cluster with 2+ Active Directory servers in ...
2
votes
1answer
212 views

Bringing Linux Accounts in Active Directory

I'm trying to centralize user login information via Active Directory. Currently I have AD running on Server 2008 R2. I do have Identity Management for UNIX installed on it. I also have a few Linux ...
3
votes
1answer
2k views

winbind from samba 3.6.3 on Linux works but does not integrate with OS?

Successfully compiled and installed the latest version of samba. Started winbindd and the following diagnostic commands work: wbinfo -p, wbinfo -c, net ads testjoin, etc... However! when using ...
1
vote
0answers
430 views

Fedora join to AD DS (svr 2008): NT_STATUS_INVALID_COMPUTER_NAME

I have been attempting to join my Fedora machine to my 2008 AD DS domain (testdomain.lcl) for some time now. I have followed this article: http://weblog.bignerdranch.com/?p=6 But with no luck. I ...
0
votes
2answers
443 views

Win Server 2008 force kerberos setting

I am currently facing the problem that a linux machine running Ubuntu 10.04 LTS with samba and winbindd installed is unable to join a Domain, that is managed by a Windows 2008 DC. The linux config, ...
2
votes
1answer
415 views

CentOS 6 Gnome login immediately logs me out

Have a strange issue on freshly installed CentOS 6, with Samba Windows 2008 R2 authentication. The login succeeds, and even the home directory created, but then I'm thrown back to the login scren ...
6
votes
5answers
4k views

Linux authentication via ADS — allowing only specific groups in PAM

I'm taking the samba / winbind / PAM route to authenticate users on our linux servers from our Active Directory domain. Everything works, but I want to limit what AD groups are allowed to ...
3
votes
1answer
509 views

Best Management Practices for using Winbind?

I'm planning on migrating a few of our Linux servers to use AD authentication via SAMBA/Winbind. Operating system will be openSUSE 11.3 x64. Our AD environment does not have UNIX extensions ...
0
votes
0answers
753 views

winbind failing after a semi-random amount of time

I have winbind set up to authenticate to our AD for samba shares. This is the third such server, and the only one having any issues. It seems after a random amount of time samba shares will just stop ...
1
vote
2answers
2k views

Solaris 10: winbind can't connect to Active Directory

Goal: join a Solaris 10 machine to an existing Active Directory. Steps I did: Installed software (Samba 3.4.2 from http://www.sunfreeware.com) Received a Kerberos ticket with kinit ...
1
vote
2answers
2k views

Configure Winbind to get User Info from Windows

I need to configure SAMBA and Winbind on Ubuntu 10.04.1 clients to get their UID, GID, and home directory from Windows Active Directory. I have Windows Services for Unix installed with the relevant ...
6
votes
4answers
4k views

Linux + Active directory authentication + only letting certain groups login

I have some linux boxes that use Windows Active Directory authentication, that works just fine (Samba + Winbind). What I would like to do now though is only allow certain people or certain groups to ...
4
votes
3answers
394 views

Linux on Windows AD Domain

Successfully joined my Linux Box to a Windows AD Domain. Wanted to know from other admins if it us possible to specify what groups from windows ad is allowed to login? Otherwise anyone with a AD ...
2
votes
2answers
873 views

Windows Share authentication from Active Directory Linux login

I'm using Active Directory to log into RHEL. To do this, I followed the steps outlined here: ...
4
votes
5answers
3k views

OS X: Finder error -36 when using SMB shares on a Samba server bound to AD

We're looking at deploying SMB homes on Debian (5.0.3) for our mac clients rather than purchasing four new Xserves. We've got our test servers built and functioning properly. Windows clients behave ...
1
vote
2answers
1k views

Samba: AD authentication for local users

We have a lot of Linux development servers which are generally accessed via SSH. Each developer has a local account on each box, managed by Puppet. Logins are via private keys only; there are no local ...
0
votes
1answer
190 views

kerberos5 unable to authenticate

We have a Debian file server, configured to serve up samba shares, using winbind and kerberos. This is configured to authenticate against a Windows2003 DC. All worked fine until recently when I did a ...
1
vote
2answers
2k views

getent groups shows AD groups, but getent passwd doesn't show users

Attempting to get my fedora linux machine to allow Active Directory logons, but I'm not aple to get past this. I'm trying to reconcile a number of tutorials which seem to give contradictory advice as ...