Winbind is part of the Samba suite and provides an NSS and PAM layer for Unix/Linux systems to integrate authentication with a Windows domain

learn more… | top users | synonyms

3
votes
2answers
1k views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
1
vote
2answers
5k views

winbindd: kinit succeeded but ads_sasl_spnego_krb5_bind failed: Cannot contact any KDC for requested realm

While looking for reasons why logging in to a samba machines joined to Active Directory is slow I have the strong impression that the following error in my log file could be a hint. Apr 3 14:44:14 ...
0
votes
2answers
758 views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
0
votes
2answers
553 views

Win Server 2008 force kerberos setting

I am currently facing the problem that a linux machine running Ubuntu 10.04 LTS with samba and winbindd installed is unable to join a Domain, that is managed by a Windows 2008 DC. The linux config, ...
2
votes
1answer
538 views

PAM Winbind Expired Password

We've got Winbind/Kerberos setup on RHEL for AD authentication. Working fine however I noticed that when a password has expired, we get a warning but shell access is still granted. What's the ...
2
votes
1answer
1k views

vsftpd with pam_winbind.so

I'm trying to setup vsftpd to use logins from our domain. I want the ftp users to be able to login using their active directory username/password and have be able to have full access to ...
1
vote
1answer
143 views

Winbind not enumerating users and groups of trusted domain

I'm using Samba 4.1.6-Ubuntu in Ubuntu 14.04, for authenticating users from two domains with a one-way cross-forest trust between them. Samba machine is joined to DOMAINA, while DOMAINB is the trusted ...
1
vote
1answer
144 views

Ubuntu 14.04 Active Directory auth fails after static ip config

I'm having 6 Ubuntu 14.04 servers that are joined to active directory (2003 domain functional level 2008r2 schema) All of the servers work's fine when network interface is configured to use DHCP. But ...
1
vote
1answer
353 views

Fedora 21 as an AD member suddenly stopped working

I had my Fedora 21 workstation connected to my AD domain and working for about a month and all was well and then I came in one morning and couldn't login. My initial response was blaming Win2013 and ...
1
vote
1answer
2k views

winbind separator and group name behavior in getent group, constantly changing

I have a problem that occasionally apprears-dissapears and it drives me nuts. My Debian servers are authenticated against AD and only "linuxadmins" group member can SSH to server and "sudo su". SSH ...
0
votes
1answer
524 views

'realm join --client-software sssd' on centos-7 joins two realms (one with sssd and one with winbind)

On clean installed centos-7 host: realm join -U foo --client-software sssd AD.EXAMPLE.COM After running realm list output looks initially like this: AD.EXAMPLE.COM type: kerberos realm-name: ...
0
votes
1answer
383 views

On Solaris, how to log IP when using winbind auth and invalid user?

This is on Solaris 10 sparc platform. I'm trying to make our denyhosts script block the dictionary ssh attacks. Unfortunately, the logging does not show an IP when the user name is invalid. We are ...
4
votes
0answers
201 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...
2
votes
0answers
108 views

Samba Shares Without Using Winbind

I am curious if it is possible to use samba shares without using winbind. In our current environment we are using SSSD, Kerberos, and Samba to complete the required tasks such as joining the windows ...
2
votes
0answers
382 views

FreeRADIUS using Active Directory integration broken without any traces

I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason. I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
2
votes
0answers
435 views

Authentization agains Samba4 domain controler and not working kinit

I've a problem with Samba 4 and Kerberos. If I call kinit, it writes Client not found in Kerberos database while getting initial credentials. I find out, that the Kerberos works with user name only, ...
2
votes
0answers
615 views

Group membership erratically lost after user logs in - Ubuntu, winbind, AD

I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
1
vote
0answers
179 views

Create and Manage Windows NFS Shares for Linux Clients with AD Authentication

I have a Windows file server that I would like to create NFS shares on. These shares need to be accessible by both Windows 7 domain clients and Linux clients (Red Hat 5 & 6) using Samba/Winbind ...
1
vote
0answers
64 views

winbind needs to be restarded after boot

Environment: Centos 6.6 Samba 3.6.23-12.el6 I have succesfully connected the server to an Active Directory Domain and I have configured it as a Samba File Server. It works fine as long as I reboot, ...
1
vote
0answers
280 views

AD Authentication with SAMBA, Winbind and SSS

I'm having trouble authentication with AD to a SAMBA share on a linux server. Authentication appears to be working, but only halfway... [root@myserver ~]# wbinfo -a my_ad_user%password123 ...
1
vote
0answers
277 views

after upgrade to winbind 3.6.24 the NT users cannot login into my RHEL4 box

I upgraded winbind/samba from 3.0.33 to 3.6.24 in a 32-bit RHEL4 box. The problem now is that any NT user cannot login. The error message found in /var/log/messages is Sep 3 09:05:20 node2 ...
1
vote
0answers
281 views

Apache + PAM + Winbind slow logins

Since upgrading our old Debian Lenny server to Ubuntu 12.04, we've noticed intermittent slow or failed access to Apache. Many or most web requests work fine, but occasionally, a Subversion client ...
1
vote
0answers
60 views

pam_mount on CentOS 5 NOT working with Winbind

I used the instructions located here: Installing pam_mount on CentOS 5 However, when I add the pam_mount.so entries, and reboot the machine, I cannot log in. Each time I enter the login and press ...
1
vote
0answers
159 views

Best way to bind multiple RHEL 6 Systems to AD and use NFS?

I am currently migrating systems to an AD domain using winbind. This works fine but I have discovered that NFS mounts don't have proper permissions because users and groups end up with different ...
1
vote
0answers
181 views

Winbind info shows local users that do not exist

I am setting up Samba on a Linux machine running CentOS 6 (called localhost, and the AD computer I am connecting to is dc.companyname.com), and I have done everything successfully, except when I type ...
1
vote
0answers
751 views

Fedora join to AD DS (svr 2008): NT_STATUS_INVALID_COMPUTER_NAME

I have been attempting to join my Fedora machine to my 2008 AD DS domain (testdomain.lcl) for some time now. I have followed this article: http://weblog.bignerdranch.com/?p=6 But with no luck. I ...
1
vote
0answers
105 views

Domain logon with Linux

I've set up Samba and winbind, and everything is working fine. I can see all AD users and groups, and corresponding relationships. I've also set up PAM authentication successfully. I have a local user ...
0
votes
0answers
186 views

Samba Login with Trust Domain User

I'm studying Two-way Domain Trust between Samba and AD. I configured Trust, and I can login with Trust Domain User on Windows Client. But I can't login with Trust Domain User on Linux Client. I ...
0
votes
0answers
310 views

Speeding up Winbind group lookups?

I have an RHEL 6 server bound to an AD domain. Everything works fine but group lookups are extremely slow. Some lookups can take over 60 seconds. This is very painful when running sudo and when users ...