Winbind is part of the Samba suite and provides an NSS and PAM layer for Unix/Linux systems to integrate authentication with a Windows domain

learn more… | top users | synonyms

1
vote
1answer
4k views

Ubuntu + AD; Failed to join domain: failed to set machine spn: Constraint violation

I'm attempting to join a Ubuntu 12.04 server to Active Directory. I installed samba, and kb5-user, created a machine account in AD, and did: > net ads testjoin Join is OK So far so good. Then I ...
0
votes
1answer
339 views

On Solaris, how to log IP when using winbind auth and invalid user?

This is on Solaris 10 sparc platform. I'm trying to make our denyhosts script block the dictionary ssh attacks. Unfortunately, the logging does not show an IP when the user name is invalid. We are ...
2
votes
1answer
432 views

Joining Linux cloned VM to Active directory

Joining Linux host to Windows AD is widely documented.However I struggle to find any guides or best practices on how to join Linux clones that were already members of the domain. Naturally things ...
1
vote
1answer
2k views

pam_mount of smb share on rhel6, home directory not available for login - probably SELinux?

I'm using the Fedora 12 pam_mount / libHX RPMs on a RHEL 6 x86_64 system to automatically mount home directories from a NetApp system configured with NTFS-only security AD-bound logins work fine - ...
6
votes
2answers
749 views

How do Active Directory domain joined computers (native MS Windows or Linux with winbind) determine the closest password server?

How do Active Directory domain joined computers (native MS Windows or Linux with winbind) determine the closest password server? This question implies a cluster with 2+ Active Directory servers in ...
2
votes
1answer
263 views

Bringing Linux Accounts in Active Directory

I'm trying to centralize user login information via Active Directory. Currently I have AD running on Server 2008 R2. I do have Identity Management for UNIX installed on it. I also have a few Linux ...
3
votes
1answer
2k views

winbind from samba 3.6.3 on Linux works but does not integrate with OS?

Successfully compiled and installed the latest version of samba. Started winbindd and the following diagnostic commands work: wbinfo -p, wbinfo -c, net ads testjoin, etc... However! when using ...
1
vote
0answers
566 views

Fedora join to AD DS (svr 2008): NT_STATUS_INVALID_COMPUTER_NAME

I have been attempting to join my Fedora machine to my 2008 AD DS domain (testdomain.lcl) for some time now. I have followed this article: http://weblog.bignerdranch.com/?p=6 But with no luck. I ...
0
votes
2answers
494 views

Win Server 2008 force kerberos setting

I am currently facing the problem that a linux machine running Ubuntu 10.04 LTS with samba and winbindd installed is unable to join a Domain, that is managed by a Windows 2008 DC. The linux config, ...
3
votes
1answer
805 views

Logging on as root without winbind timeouts

How can I set up my Linux box so that, if the Active Directory domain controller is down, I can still log in as root, without any timeouts or delays? Following the example of most of the ...
1
vote
0answers
101 views

Domain logon with Linux

I've set up Samba and winbind, and everything is working fine. I can see all AD users and groups, and corresponding relationships. I've also set up PAM authentication successfully. I have a local user ...
0
votes
1answer
153 views

Configure winbind to check multiple attributes in AD?

I have winbind up and running and it is working well for authentication. When a user is prompted at logon to provide credentials what AD attribute is username checked against? Is it name? ...
2
votes
1answer
450 views

CentOS 6 Gnome login immediately logs me out

Have a strange issue on freshly installed CentOS 6, with Samba Windows 2008 R2 authentication. The login succeeds, and even the home directory created, but then I'm thrown back to the login scren ...
2
votes
1answer
943 views

vsftpd with pam_winbind.so

I'm trying to setup vsftpd to use logins from our domain. I want the ftp users to be able to login using their active directory username/password and have be able to have full access to ...
4
votes
1answer
2k views

Linux computer (Debian) in a Windows Active Directory Domain, Administrator of AD should have root permission after login

I managed to join my Debian machine (Squeeze) to an existing Active Directory (MS Windows 2008 R2 Server). Everything works fine, I can login using accounts from the Active Directory (NTP, Kerberos, ...
0
votes
3answers
175 views

OpenSUSE 11 AD auth works, but not netbios

I've setup a desktop machine with OpenSUSE 11.4 and have Active Directory authentication working properly. I can ping, rdp and ssh to'/from other machines. I can access windows shares from OpenSUSE ...
0
votes
1answer
2k views

Authentication failure of OpenVPN client against Active Directory

I'm getting the following error (client side) when connecting to my OpenVPN server: AUTH: Received AUTH_FAILED control message and on the server I get thefollowing error message in teh openvpn ...
1
vote
1answer
1k views

saslauthd and PAM: “Too many open files” error - saslauthd restart fixes this - what is wrong?

I have a Postfix mail server running Debian Squeeze. SASL authentication for secure SMTP is supported by saslauthd which relies on pam, which relies on winbind. This pattern seems to be reoccuring ...
6
votes
5answers
5k views

Linux authentication via ADS — allowing only specific groups in PAM

I'm taking the samba / winbind / PAM route to authenticate users on our linux servers from our Active Directory domain. Everything works, but I want to limit what AD groups are allowed to ...
3
votes
2answers
751 views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
3
votes
1answer
582 views

Best Management Practices for using Winbind?

I'm planning on migrating a few of our Linux servers to use AD authentication via SAMBA/Winbind. Operating system will be openSUSE 11.3 x64. Our AD environment does not have UNIX extensions ...
1
vote
2answers
2k views

Solaris 10: winbind can't connect to Active Directory

Goal: join a Solaris 10 machine to an existing Active Directory. Steps I did: Installed software (Samba 3.4.2 from http://www.sunfreeware.com) Received a Kerberos ticket with kinit ...
1
vote
2answers
2k views

Configure Winbind to get User Info from Windows

I need to configure SAMBA and Winbind on Ubuntu 10.04.1 clients to get their UID, GID, and home directory from Windows Active Directory. I have Windows Services for Unix installed with the relevant ...
0
votes
1answer
2k views

winbind and squid problem

I've have squid configured with auth in the AD via winbind now I have wired problems with authorisation I found in the logs interesting string kinit succeeded but ads_sasl_spnego_krb5_bind failed: ...
6
votes
5answers
6k views

Linux + Active directory authentication + only letting certain groups login

I have some linux boxes that use Windows Active Directory authentication, that works just fine (Samba + Winbind). What I would like to do now though is only allow certain people or certain groups to ...
4
votes
3answers
424 views

Linux on Windows AD Domain

Successfully joined my Linux Box to a Windows AD Domain. Wanted to know from other admins if it us possible to specify what groups from windows ad is allowed to login? Otherwise anyone with a AD ...
2
votes
2answers
964 views

Windows Share authentication from Active Directory Linux login

I'm using Active Directory to log into RHEL. To do this, I followed the steps outlined here: ...
4
votes
5answers
3k views

OS X: Finder error -36 when using SMB shares on a Samba server bound to AD

We're looking at deploying SMB homes on Debian (5.0.3) for our mac clients rather than purchasing four new Xserves. We've got our test servers built and functioning properly. Windows clients behave ...
1
vote
2answers
2k views

Samba: AD authentication for local users

We have a lot of Linux development servers which are generally accessed via SSH. Each developer has a local account on each box, managed by Puppet. Logins are via private keys only; there are no local ...
0
votes
1answer
195 views

kerberos5 unable to authenticate

We have a Debian file server, configured to serve up samba shares, using winbind and kerberos. This is configured to authenticate against a Windows2003 DC. All worked fine until recently when I did a ...
1
vote
2answers
2k views

getent groups shows AD groups, but getent passwd doesn't show users

Attempting to get my fedora linux machine to allow Active Directory logons, but I'm not aple to get past this. I'm trying to reconcile a number of tutorials which seem to give contradictory advice as ...