Questions tagged [winbind]

Winbind is part of the Samba suite and provides an NSS and PAM layer for Unix/Linux systems to integrate authentication with a Windows domain

0
votes
1answer
16 views

Samba winbind and smbd failing on boot on Ubuntu 18.04

S.O. Ubuntu 18.04.2 Samba: 4.7.6-Ubuntu I have one samba ad dc server (dc1.jorla.club) running and working properly. There is also a second server (samba.jorla.club) meant to work as a file share ...
0
votes
0answers
22 views

Convert Samba Active Directory to sssd instead of winbind

I've inherited a Samba 4 Active Directory (AD) server. It works fine with winbind, however for security reasons we'd like to change to sssd. The domain has two domain controllers (primary and ...
1
vote
0answers
49 views

Samba: authenticate against Active Directory using winbind but authorize against separate OpenLDAP server

Short Version How can I configure a CentOS 7 machine with Samba 4.8.0 serving users on Windows 7 clients to authenticate using their domain login credentials (winbindd and Active Directory) but be ...
1
vote
1answer
35 views

FreeRADIUS can not login with Active Directory user

I install freeradius 3 in debian 9. I can login with user from text file in radius but I want to login with user from Active Directory. First, I install this library. apt install samba winbind krb5-...
0
votes
0answers
8 views

Make winbind rfc2307 optional

Back in the samba-winbind 4.4 days, you could set a default template shell and template directory for AD users, but override these defaults by using rfc2307. This was useful because we could allow ...
0
votes
1answer
89 views

Winbind rfc2307 shell not honored after Samba 4 upgrade

I have CentOS 7 servers with samba-winbind talking to an AD. We use rfc2307 to override the default shell for certain (power) users. One such server is still running an older version of samba-winbind, ...
0
votes
0answers
46 views

How to join linux pc to active directory in specific ou with authconfig

I use authconfig command to join linux computers to AD How do I specify which OU they go in? I llook at authconfig --help but not see antyhing\ Can I use --ldapbasedn=<dn> to select what OU ...
0
votes
0answers
123 views

CentOS 7 SAN Volume SMB Re-share Not Respecting Windows ACL's

Issue: CentOS 7 machine that is fiber connected to a SAN volume needs to re-share the SAN volume mount via SMB with proper Windows Active Directory users/groups but it does not display the ACL's. ...
0
votes
0answers
157 views

samba share to two AD domain users

I have encountered an issue related to samba share for multiple domain users. Both AD domains are trusted each other and updated kerberos entries for both both domain in krb5.onf. Still only user from ...
0
votes
0answers
827 views

winbindd - getent passwd show groups from AD

this is my first post. I have setup winbindd to cooperate with my AD. This is my /etc/samba/smb.conf: [global] security = ADS workgroup = MYDOMAIN realm = MYDOMAIN.LOCAL log file = /...
1
vote
1answer
217 views

Samba File Server shows already deleted users as directory owner / winbind name resolution

I have on a Samba File Server (openSUSE Leap 15), a directory with subdirectorys in which some should have no more owner. User Name Resolution is going by winbind. I want to delete every dir with no ...
0
votes
0answers
350 views

Samba for Debian Stretch keeps asking for password

so I've got the dreaded 'samba keeps asking for password' issue in Debian Stretch. My environment: 2x AD DCs running WS2012R2 A few physical computers and several VMs running on ESXi 6.7 All ...
1
vote
0answers
85 views

pam_winbind: unknown option require_membership_of

I'm trying to configure the VSFTPD with Winbind to restrict users authenticated by Active Directory, only to those that belong to specific group. I'm using a generic conf file for the vsftpd, with ...
1
vote
0answers
421 views

Samba4 in AD Domain: getent shows only local accounts

I had my samba domain member working a few days ago, but now it stopped serving domain users. Some of the steps I already tried: clear caches, rejoin domain, reboot, pam-auth-update, with and without "...
1
vote
1answer
462 views

Moving from LDAP to LDAPS - Ubuntu 14.04 Winbind, Samba

I have an Ubuntu 14.04 AD DS member server which appears to be binding to AD no problem with the following command: wbinfo -g I want to move to using LDAPS now. I configured LDAPS on my 2012 R2 DC ...
2
votes
2answers
311 views

winbind authentication through apache slow

I have a linux machine setup to authenticate users using Active Directory with samba/winbind. Apache is then setup to use that to authenticate the users. This is done using: <IfModule ...
0
votes
0answers
1k views

Need help in joining Centos to AD with Winbind

I am trying to join Centos 7.3 Linux to Microsoft AD through winbind and while learning, I am failing to do so. I can not use sssd because authentication needs to talk cross forest, which sssd doesn't ...
8
votes
4answers
11k views

Joining Ubuntu Server 17.04 to Windows AD: Likewise vs Centrify vs Winbind vs SSSD

I have quite a few Ubuntu Server 17.04 hosts that must be joined to an existing Windows AD domain (Windows Server 2016). I've never done it before, but I'm aware about several ways to achieve this, ...
1
vote
2answers
14k views

Samba 4: domain joined, but all users are mapped to nobody, and shares are inaccessible from Windows clients

I've got a Debian/Jessie Samba 4.2.14 running as an AD member. ADC is a Windows2008R2 server. Join worked without problem. # net ads testjoin Join is OK wbinfo -u and wbinfo -g work perfectly and ...
1
vote
0answers
613 views

Samba Winbind fail to lookup “domain users” group

Debian samba server authenticated with active directory "# id username" is able to lookup all group id but just "domain users" is missing intermittently, result in (servername\none) # id test.user ...
2
votes
0answers
4k views

Unable to authenticate to AD using Kinit - cache file not found

I'm trying to set up Winbind with PAM and Kerberos to authenticate CentOS 7 against active directory. So far this is what I've done: yum -y install authconfig krb5-workstation pam_krb5 samba-common ...
0
votes
0answers
512 views

Unable to log in as root or domain user

Solved - See Update 2 below. We have a Debian Jessie DNS / SSH server. I have joined it to our AD domain by following this guide and created a cron job to sync the time with a domain controller ...
1
vote
0answers
1k views

Set up Samba with Active Directory and local user authentication

My main goal is to set up a Samba-Server, to where users can connect to by using their Active-Directory credentials. Additionally, local linux users on the Samba-Server should be able to authenticate. ...
0
votes
2answers
5k views

winbindd gss_init_sec_context failed with [Unspecified GSS failure]

Running CentOS7. Every hour I get the same error message. I have no problems authentication. I believe there is a Redhat solution but I don't have subscription. https://access.redhat.com/solutions/...
1
vote
1answer
111 views

Easier method of setting up Winbind auth in LMDE?

Some GNU/Linux distros (CentOS comes to mind) have a neat Authentication Config tool, in which you may specify which auth methods (files, NIS, Winbind etc) to use. You specify the needed parameters (e....
0
votes
0answers
462 views

CentOS 7 group permissions not allowing access to folder

I have a CentOS7 box, "box1", domain joined using Winbind + RID method. I have a folder (NFS mount) @ /shares/share. The permissions are: root@box1:/shares# ls -n /shares/ total 8 drwxrws--- 2 0 ...
2
votes
1answer
1k views

Inconsistent winbind info on Samba 4 AD domain controller

I've setup a Samba 4 AD domain controller on Debian Jessie (samba 4.2.10). Everything's working fine, except that winbind gives wrong user/group information. I have a sample user "testuser" and a ...
0
votes
1answer
132 views

Resolve NetBIOS names without full qualification

I am connected to my office VPN and I can successfully RDP into my computer using the fully qualified name for it PC00001.myofficevpn.plc. When I try to connect using only the hostname PC00001, I do ...
3
votes
1answer
1k views

wbinfo -u does not show AD users (is empty)

We have a problem on a Ubuntu Server 14.04 (fileserver) connected to AD on a Windows Server 2008 R2 using Samba (version 4.3.8)/WinBind and Kerberos. The problem is that users do not have writing ...
1
vote
2answers
1k views

Initialise Kerberos ticket on ssh login using PAM

Right, so I am struggling a bit with PAM in Centos7. I have no idea how to configure it manually and make the changes permanent so that I get a kerberos ticket after a successful ssh login. The ...
-1
votes
1answer
619 views

Samba file server as domain member: error when joining domain

I would like to set up samba 4 to share a local directory, so that domain users are allowed to mount the directory. I don't want domain users to be able to log in the linux machine, they should only ...
3
votes
2answers
5k views

Groupmapping does not work for AD groups

We have an ActiveDirectory where we get our users from. So authentication on the linux machine works over pam. We managed this part to work so far, but we need all users to be part of the local group ...
1
vote
0answers
715 views

Random SSH connection timeout on first try to CentOS servers

Have got a curious issue with SSH on CentOS 6 and haven't found a solution yet. We have our CentOS 6 servers all joined to an Active Directory 2012 R2 domain using Winbind. It is not used for ...
2
votes
3answers
625 views

linux - windows ad authentication - why join domain?

When using Windows AD to authenticate users on Linux servers is there an advantage to using Winbind and "Joining the Domain" over just authenticating via Kerberos and looking up UID,GID, home dir, etc ...
1
vote
0answers
239 views

Winbind forgets who I am

On one of our Ubuntu 14.04 servers, running Winbind 4.1.6+dfsg-1ubuntu2.14.04.9, Winbind periodically forgets who I am, resulting in strange errors like ssh aborting with an "unknown uid" error ...
0
votes
0answers
6k views

Output from “wbinfo --user-groups USER” and “wbinfo --group-info GROUP” do not match

I am using Red Hat Enterprise Linux Server release 6.7 with winbindd/smbd version 3.6.23-20.0.1.el6. I created some new AD groups and added existing users. I used this command: wbinfo --group-info &...
2
votes
0answers
524 views

Samba doesn't seem to stay joined to Active Directory domain [closed]

I can initially join a linux box to the domain with these commands: sudo kinit administrator@WINDOWS.CORP.SPRINGVENTUREGROUP.COM sudo net ads join -k After a few hours or the next day, this happens: ...
0
votes
0answers
501 views

How can I use winbind to return a filter-id based on group membership?

I have a couple of FreeRadius 3.0.9 servers which were just put into production on our Meraki network. We want to use user group membership in Active Directory to determine policy to be carried out by ...
1
vote
1answer
570 views

Apache NTLM not authenicating domain username/password.

I have a centos box and I am trying to setup NTLM authenication for apache. I have the linux box on the AD domain already and able to get user and group info using the wbinfo command. I have the ...
1
vote
2answers
1k views

Removing a “semi joined” Ubuntu workstation from an Active Directory domain

I am joining an Ubuntu workstation to an MS AD. I had 1 or 2 config issues when I first tried to run net ads join which resulted in an error message and the workstation not being added correctly I ...
1
vote
2answers
3k views

Cross domain - AD group membership changes not reflected in winbind

I have similar cases on this thread at AD group membership changes not reflected in winbind information. The only difference is that this only occurs on "cross domain" for my scenario. Here is my ...
2
votes
1answer
1k views

Winbind not enumerating users and groups of trusted domain

I'm using Samba 4.1.6-Ubuntu in Ubuntu 14.04, for authenticating users from two domains with a one-way cross-forest trust between them. Samba machine is joined to DOMAINA, while DOMAINB is the trusted ...
2
votes
0answers
2k views

Create and Manage Windows NFS Shares for Linux Clients with AD Authentication

I have a Windows file server that I would like to create NFS shares on. These shares need to be accessible by both Windows 7 domain clients and Linux clients (Red Hat 5 & 6) using Samba/Winbind ...
1
vote
1answer
2k views

'realm join --client-software sssd' on centos-7 joins two realms (one with sssd and one with winbind)

On clean installed centos-7 host: realm join -U foo --client-software sssd AD.EXAMPLE.COM After running realm list output looks initially like this: AD.EXAMPLE.COM type: kerberos realm-name: AD....
2
votes
1answer
3k views

Ubuntu 14.04 Active Directory auth fails after static ip config

I'm having 6 Ubuntu 14.04 servers that are joined to active directory (2003 domain functional level 2008r2 schema) All of the servers work's fine when network interface is configured to use DHCP. But ...
1
vote
1answer
669 views

Fedora 21 as an AD member suddenly stopped working

I had my Fedora 21 workstation connected to my AD domain and working for about a month and all was well and then I came in one morning and couldn't login. My initial response was blaming Win2013 and ...
1
vote
0answers
230 views

winbind needs to be restarded after boot

Environment: Centos 6.6 Samba 3.6.23-12.el6 I have succesfully connected the server to an Active Directory Domain and I have configured it as a Samba File Server. It works fine as long as I reboot, ...
2
votes
0answers
368 views

Samba Shares Without Using Winbind

I am curious if it is possible to use samba shares without using winbind. In our current environment we are using SSSD, Kerberos, and Samba to complete the required tasks such as joining the windows ...
1
vote
0answers
1k views

AD Authentication with SAMBA, Winbind and SSS

I'm having trouble authentication with AD to a SAMBA share on a linux server. Authentication appears to be working, but only halfway... [root@myserver ~]# wbinfo -a my_ad_user%password123 ...
4
votes
0answers
828 views

Configure ntlm_auth for offline operations

We currently have a NAC server set up to authenticate against a Samba4 AD using the ntlm_auth utility and would like to make it more tolerant to network outages. Currently, when the NAC loses ...