Winbind is part of the Samba suite and provides an NSS and PAM layer for Unix/Linux systems to integrate authentication with a Windows domain

learn more… | top users | synonyms

6
votes
2answers
641 views

How do Active Directory domain joined computers (native MS Windows or Linux with winbind) determine the closest password server?

How do Active Directory domain joined computers (native MS Windows or Linux with winbind) determine the closest password server? This question implies a cluster with 2+ Active Directory servers in ...
6
votes
4answers
4k views

Linux + Active directory authentication + only letting certain groups login

I have some linux boxes that use Windows Active Directory authentication, that works just fine (Samba + Winbind). What I would like to do now though is only allow certain people or certain groups to ...
6
votes
5answers
4k views

Linux authentication via ADS — allowing only specific groups in PAM

I'm taking the samba / winbind / PAM route to authenticate users on our linux servers from our Active Directory domain. Everything works, but I want to limit what AD groups are allowed to ...
4
votes
2answers
1k views

Active directory integration not working properly with winbind and samba

I'm trying to get my linux box to use active directory authentication. I believe I have almost everything setup correctly. I'm able to issue wbinfo -g and wbinfo -u and see all the groups and users ...
4
votes
3answers
394 views

Linux on Windows AD Domain

Successfully joined my Linux Box to a Windows AD Domain. Wanted to know from other admins if it us possible to specify what groups from windows ad is allowed to login? Otherwise anyone with a AD ...
4
votes
5answers
3k views

OS X: Finder error -36 when using SMB shares on a Samba server bound to AD

We're looking at deploying SMB homes on Debian (5.0.3) for our mac clients rather than purchasing four new Xserves. We've got our test servers built and functioning properly. Windows clients behave ...
4
votes
1answer
702 views

Import Active Directory users into Unix/Linux/FreeBSD group

I need to have FreeBSD 8.2 RELEASE p9 (running FreeNAS) import or associate Active Directory users (or Security Group) with a Unix/FreeBSD group. This way I can use FreeBSD group(s) security on a ...
4
votes
1answer
1k views

Linux computer (Debian) in a Windows Active Directory Domain, Administrator of AD should have root permission after login

I managed to join my Debian machine (Squeeze) to an existing Active Directory (MS Windows 2008 R2 Server). Everything works fine, I can login using accounts from the Active Directory (NTP, Kerberos, ...
3
votes
1answer
635 views

Logging on as root without winbind timeouts

How can I set up my Linux box so that, if the Active Directory domain controller is down, I can still log in as root, without any timeouts or delays? Following the example of most of the ...
3
votes
1answer
510 views

Best Management Practices for using Winbind?

I'm planning on migrating a few of our Linux servers to use AD authentication via SAMBA/Winbind. Operating system will be openSUSE 11.3 x64. Our AD environment does not have UNIX extensions ...
3
votes
1answer
467 views

Samba/Winbind issues joing to Active directory domain

I'm currently in the process of setting up winbind/samba and getting a few issues. I can test connectivity with wbinfo fine: [root@buildmirror ~]# wbinfo -u hostname username administrator guest ...
3
votes
1answer
874 views

Linux with winbind, disable local users while AD is available?

Routers and switches with RADIUS authentication can be configured such that login is disabled for locally configured users as long as the RADIUS server is available. If the RADIUS server becomes ...
3
votes
1answer
2k views

winbind from samba 3.6.3 on Linux works but does not integrate with OS?

Successfully compiled and installed the latest version of samba. Started winbindd and the following diagnostic commands work: wbinfo -p, wbinfo -c, net ads testjoin, etc... However! when using ...
2
votes
1answer
289 views

Joining Linux cloned VM to Active directory

Joining Linux host to Windows AD is widely documented.However I struggle to find any guides or best practices on how to join Linux clones that were already members of the domain. Naturally things ...
2
votes
1answer
695 views

Managing UID/GID of dual Samba / Winbind to AD

I have two Linux servers connected to an Active Directory Windows 2008 server using Samba/Winbind, and here is my samba config workgroup = COMPANY realm = COMPANY.COM server string = ...
2
votes
1answer
1k views

solved - SSH instant logout after ssh login kerberos / winbind

I set up a ubuntu server which is authenticating against the active directory of our W2k8 Domain. Everything went well and I see all the users in getent passwd, and wbinfo. I want to be able to use ...
2
votes
1answer
215 views

Bringing Linux Accounts in Active Directory

I'm trying to centralize user login information via Active Directory. Currently I have AD running on Server 2008 R2. I do have Identity Management for UNIX installed on it. I also have a few Linux ...
2
votes
1answer
415 views

CentOS 6 Gnome login immediately logs me out

Have a strange issue on freshly installed CentOS 6, with Samba Windows 2008 R2 authentication. The login succeeds, and even the home directory created, but then I'm thrown back to the login scren ...
2
votes
2answers
873 views

Windows Share authentication from Active Directory Linux login

I'm using Active Directory to log into RHEL. To do this, I followed the steps outlined here: ...
2
votes
0answers
48 views

Linux machine is in a windows domain, but domain logon isn't working

We have a small network in our department 2 Win Server 2008 Domain Controller 1 debian webserver a number of win7 Clients My predecssor tried to add the webserver to our domain in order to login ...
2
votes
0answers
110 views

Authentization agains Samba4 domain controler and not working kinit

I've a problem with Samba 4 and Kerberos. If I call kinit, it writes Client not found in Kerberos database while getting initial credentials. I find out, that the Kerberos works with user name only, ...
2
votes
1answer
131 views

PAM Winbind Expired Password

We've got Winbind/Kerberos setup on RHEL for AD authentication. Working fine however I noticed that when a password has expired, we get a warning but shell access is still granted. What's the ...
2
votes
0answers
317 views

Group membership erratically lost after user logs in - Ubuntu, winbind, AD

I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
2
votes
1answer
753 views

vsftpd with pam_winbind.so

I'm trying to setup vsftpd to use logins from our domain. I want the ftp users to be able to login using their active directory username/password and have be able to have full access to ...
2
votes
2answers
587 views

Winbind/AD: Local users with identical AD usernames

We are getting ready to add Winbind/Samba to some CentOS servers. Identity Management for UNIX is running on our DC, and it's testing well so far. There is one scenario I'm having trouble with, and ...
1
vote
2answers
2k views

Solaris 10: winbind can't connect to Active Directory

Goal: join a Solaris 10 machine to an existing Active Directory. Steps I did: Installed software (Samba 3.4.2 from http://www.sunfreeware.com) Received a Kerberos ticket with kinit ...
1
vote
2answers
2k views

Configure Winbind to get User Info from Windows

I need to configure SAMBA and Winbind on Ubuntu 10.04.1 clients to get their UID, GID, and home directory from Windows Active Directory. I have Windows Services for Unix installed with the relevant ...
1
vote
2answers
2k views

getent groups shows AD groups, but getent passwd doesn't show users

Attempting to get my fedora linux machine to allow Active Directory logons, but I'm not aple to get past this. I'm trying to reconcile a number of tutorials which seem to give contradictory advice as ...
1
vote
1answer
39 views

Samba need an ip of same network of Windows Active Directory to make the join?

Im working to setup samba in windows network. The goal is windows users from Active Direcotry uses their passwords to log in samba shares. I am not sure if, in this setup, AD server and Samba Server ...
1
vote
1answer
1k views

saslauthd and PAM: “Too many open files” error - saslauthd restart fixes this - what is wrong?

I have a Postfix mail server running Debian Squeeze. SASL authentication for secure SMTP is supported by saslauthd which relies on pam, which relies on winbind. This pattern seems to be reoccuring ...
1
vote
2answers
1k views

Samba: AD authentication for local users

We have a lot of Linux development servers which are generally accessed via SSH. Each developer has a local account on each box, managed by Puppet. Logins are via private keys only; there are no local ...
1
vote
1answer
893 views

Linux PAM pam_succeed_if.so

I've specified an AD security group in PAM to restrict which domain users can login. I've also restricted sessions for AD users to this group. This prevents a logged in user from doing an "su -" to ...
1
vote
1answer
442 views

Restrict su to domain user in Winbind/Kerberos Linux AD integration

We've got some RHEL 5 servers joined to AD using Winbind/Kerberos which is working well overall. I've specified an AD security group in PAM to restrict which domain users can login. auth ...
1
vote
0answers
35 views

Linux nested groups with winbind

We have several RHEL6 servers connected to Active Directory using winbind. All servers are configured identically using a configuration management tool. Servers however produce different results when ...
1
vote
0answers
18 views

pam_mount on CentOS 5 NOT working with Winbind

I used the instructions located here: Installing pam_mount on CentOS 5 However, when I add the pam_mount.so entries, and reboot the machine, I cannot log in. Each time I enter the login and press ...
1
vote
2answers
206 views

mounting windows shares on linux while keeping windows permissions

I have a windows share on a windows2003 server (WINJOE) which I want to back up to a Linux machine (LINUXJOE) that is properly joined to the domain. My goal is to backup shared folders of WINJOE to ...
1
vote
1answer
332 views

winbind separator and group name behavior in getent group, constantly changing

I have a problem that occasionally apprears-dissapears and it drives me nuts. My Debian servers are authenticated against AD and only "linuxadmins" group member can SSH to server and "sudo su". SSH ...
1
vote
0answers
77 views

Best way to bind multiple RHEL 6 Systems to AD and use NFS?

I am currently migrating systems to an AD domain using winbind. This works fine but I have discovered that NFS mounts don't have proper permissions because users and groups end up with different ...
1
vote
1answer
470 views

CentOS 6 Unable to Resolve One AD Account

I have a problem that has got me going round in circles. We have 14 Centos 6 AD integrated servers using Samba/Winbind with idmap_ad (security = ads, idmap backend = ad), this setup is running ...
1
vote
0answers
95 views

Winbind info shows local users that do not exist

I am setting up Samba on a Linux machine running CentOS 6 (called localhost, and the AD computer I am connecting to is dc.companyname.com), and I have done everything successfully, except when I type ...
1
vote
1answer
1k views

pam_mount of smb share on rhel6, home directory not available for login - probably SELinux?

I'm using the Fedora 12 pam_mount / libHX RPMs on a RHEL 6 x86_64 system to automatically mount home directories from a NetApp system configured with NTFS-only security AD-bound logins work fine - ...
1
vote
0answers
430 views

Fedora join to AD DS (svr 2008): NT_STATUS_INVALID_COMPUTER_NAME

I have been attempting to join my Fedora machine to my 2008 AD DS domain (testdomain.lcl) for some time now. I have followed this article: http://weblog.bignerdranch.com/?p=6 But with no luck. I ...
1
vote
0answers
94 views

Domain logon with Linux

I've set up Samba and winbind, and everything is working fine. I can see all AD users and groups, and corresponding relationships. I've also set up PAM authentication successfully. I have a local user ...
0
votes
1answer
2k views

How to use Active Directory's homeDirectory attribute for Samba?

I currently have a Samba share setup where I would like to share Unix folders with Windows users, with Active directory as the backend. I see that there is an attribute called homeDirectory in Active ...
0
votes
1answer
390 views

Variables are not expanded in smb.conf when using Samba 4

I'm using Samba 4.0.0beta2 on Debian Wheezy as Active Directory domain controller. I also use winbind in my /etc/nsswitch.conf so getent passwd returns domain users. I've set template homedir = ...
0
votes
1answer
510 views

LAN queries not resolved in BIND

I have a public url like app1.wifi.com,so that I can access my url from anywhere. Now I want to set that same url to my local machine. If I type app1.wifi.com from my LAN, it should routed to local ...
0
votes
1answer
608 views

debian hang on startup “starting the winbind daemon: winbind”

I took a copy of a VM running a debian, just so that I can play around with it. I spin up the copy, but didn't give it any network connection to avoid conflict with the original one. However, when I ...
0
votes
1answer
138 views

Configure winbind to check multiple attributes in AD?

I have winbind up and running and it is working well for authentication. When a user is prompted at logon to provide credentials what AD attribute is username checked against? Is it name? ...
0
votes
3answers
171 views

OpenSUSE 11 AD auth works, but not netbios

I've setup a desktop machine with OpenSUSE 11.4 and have Active Directory authentication working properly. I can ping, rdp and ssh to'/from other machines. I can access windows shares from OpenSUSE ...
0
votes
1answer
1k views

Authentication failure of OpenVPN client against Active Directory

I'm getting the following error (client side) when connecting to my OpenVPN server: AUTH: Received AUTH_FAILED control message and on the server I get thefollowing error message in teh openvpn ...