Winbind is part of the Samba suite and provides an NSS and PAM layer for Unix/Linux systems to integrate authentication with a Windows domain

learn more… | top users | synonyms

3
votes
2answers
764 views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
0
votes
2answers
2k views

winbindd: kinit succeeded but ads_sasl_spnego_krb5_bind failed: Cannot contact any KDC for requested realm

While looking for reasons why logging in to a samba machines joined to Active Directory is slow I have the strong impression that the following error in my log file could be a hint. Apr 3 14:44:14 ...
0
votes
2answers
498 views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
0
votes
2answers
501 views

Win Server 2008 force kerberos setting

I am currently facing the problem that a linux machine running Ubuntu 10.04 LTS with samba and winbindd installed is unable to join a Domain, that is managed by a Windows 2008 DC. The linux config, ...
2
votes
1answer
315 views

PAM Winbind Expired Password

We've got Winbind/Kerberos setup on RHEL for AD authentication. Working fine however I noticed that when a password has expired, we get a warning but shell access is still granted. What's the ...
2
votes
1answer
953 views

vsftpd with pam_winbind.so

I'm trying to setup vsftpd to use logins from our domain. I want the ftp users to be able to login using their active directory username/password and have be able to have full access to ...
1
vote
1answer
894 views

winbind separator and group name behavior in getent group, constantly changing

I have a problem that occasionally apprears-dissapears and it drives me nuts. My Debian servers are authenticated against AD and only "linuxadmins" group member can SSH to server and "sudo su". SSH ...
0
votes
1answer
345 views

On Solaris, how to log IP when using winbind auth and invalid user?

This is on Solaris 10 sparc platform. I'm trying to make our denyhosts script block the dictionary ssh attacks. Unfortunately, the logging does not show an IP when the user name is invalid. We are ...
3
votes
0answers
89 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
2
votes
0answers
31 views

Samba Shares Without Using Winbind

I am curious if it is possible to use samba shares without using winbind. In our current environment we are using SSSD, Kerberos, and Samba to complete the required tasks such as joining the windows ...
2
votes
0answers
189 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
2
votes
0answers
272 views

Authentization agains Samba4 domain controler and not working kinit

I've a problem with Samba 4 and Kerberos. If I call kinit, it writes Client not found in Kerberos database while getting initial credentials. I find out, that the Kerberos works with user name only, ...
2
votes
0answers
483 views

Group membership erratically lost after user logs in - Ubuntu, winbind, AD

I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
1
vote
0answers
42 views

How to Two-way Trust between Samba3 and AD

I'm studying Two-way Trust between Samba3 and Windows 2008 R2 AD Domain. I'm using debian 7.6.0 and Samba 3.6.6 Firts, please look my Topology. http://blog.naver.com/hjk4637/220156608223 I have AD ...
1
vote
0answers
92 views

after upgrade to winbind 3.6.24 the NT users cannot login into my RHEL4 box

I upgraded winbind/samba from 3.0.33 to 3.6.24 in a 32-bit RHEL4 box. The problem now is that any NT user cannot login. The error message found in /var/log/messages is Sep 3 09:05:20 node2 ...
1
vote
0answers
41 views

pam_mount on CentOS 5 NOT working with Winbind

I used the instructions located here: Installing pam_mount on CentOS 5 However, when I add the pam_mount.so entries, and reboot the machine, I cannot log in. Each time I enter the login and press ...
1
vote
0answers
246 views

Cant login as User from trusted domain on Debian

My Problem is the following: I joined a Debian 7 machine to an AD 2012 domain (doma) and everything works inside that domain. But when I try to log on as a user from a trusted Domain (domb) I always ...
1
vote
0answers
111 views

Best way to bind multiple RHEL 6 Systems to AD and use NFS?

I am currently migrating systems to an AD domain using winbind. This works fine but I have discovered that NFS mounts don't have proper permissions because users and groups end up with different ...
1
vote
0answers
129 views

Winbind info shows local users that do not exist

I am setting up Samba on a Linux machine running CentOS 6 (called localhost, and the AD computer I am connecting to is dc.companyname.com), and I have done everything successfully, except when I type ...
1
vote
0answers
587 views

Fedora join to AD DS (svr 2008): NT_STATUS_INVALID_COMPUTER_NAME

I have been attempting to join my Fedora machine to my 2008 AD DS domain (testdomain.lcl) for some time now. I have followed this article: http://weblog.bignerdranch.com/?p=6 But with no luck. I ...
1
vote
0answers
101 views

Domain logon with Linux

I've set up Samba and winbind, and everything is working fine. I can see all AD users and groups, and corresponding relationships. I've also set up PAM authentication successfully. I have a local user ...
0
votes
0answers
82 views

AD Authentication with SAMBA, Winbind and SSS

I'm having trouble authentication with AD to a SAMBA share on a linux server. Authentication appears to be working, but only halfway... [root@myserver ~]# wbinfo -a my_ad_user%password123 ...
0
votes
0answers
46 views

Exclude the user(s) from nss mapping

I have added a Linux machine to AD via samba 4. I've added the winbind to nsswitch mapping but it has turned out that there is a user root in the domain. I have workaround it in pam by pam_succeed_if ...
0
votes
0answers
77 views

How do I configure winbind to only register some interfaces with DDNS?

We are running an Active Directory. The hosts joined to the domain are a mix of Windows machines joined natively and Linux machines joined using winbind. All hosts have statically configured IP ...
0
votes
0answers
188 views

Apache + PAM + Winbind slow logins

Since upgrading our old Debian Lenny server to Ubuntu 12.04, we've noticed intermittent slow or failed access to Apache. Many or most web requests work fine, but occasionally, a Subversion client ...
0
votes
0answers
171 views

Samba 3.6.0 winbind module issues

All, I am having a winbind module load error on aix 7.1 trying to load winbind module for 3.6.0. methods.cfg: WINBIND: program_64 = /usr/lib/security/WINBIND_64 (have tried authonly ...
0
votes
0answers
192 views

Speeding up Winbind group lookups?

I have an RHEL 6 server bound to an AD domain. Everything works fine but group lookups are extremely slow. Some lookups can take over 60 seconds. This is very painful when running sudo and when users ...