Winbind and trusted domains

[Walter_Prentice/Trimax at trimax.com]

Oh man you should be called Harry instead of Tim, your a wizard man,

Restrict Anonymous registry key  was all my problem, old Netw. admin, had
set security issues on two of the domain controllers, actually one of them
was the PDC, the one I chose to validate accounts.

Samba and Winbind are working fine now,  we'll began testing in IT this
morning.

CVS code seem to be working pretty well on RH 7.0, so I'll keep working
with these version till you leverage 2.2.3

Thanks a lot !!!!

I have a question:
Is there any file I could backup that keeps the mappings between Domain
user and groups names and uid and gid used by Linux ?
So in case I lost the connection to the Domain and have to set it up again
(maybe reinstall samba and winbind), I don't  to need to setup all the
security again if those mappings change.

Thank you in advance.

Merry Christmas and Happy New Year !!!!







Tim Potter <tpot at samba.org>@lists.samba.org on 12/19/2001 11:07:53 PM

Sent by:  samba-admin at lists.samba.org


To:   Walter_Prentice/Trimax at trimax.com
cc:   samba at lists.samba.org

Subject:  Re: Winbind and trusted domains


On Wed, Dec 19, 2001 at 09:29:08PM -0500, Walter_Prentice/Trimax at trimax.com
wrote:

> If I run wbinfo -g it only returns groups from the remote domain, if I
run
> wbinfo -u returns the remote domain users twice the first time using
> Sxxx\username and next all the names again now showing Txxx\username.

Oh wow that's pretty freaky.  Can you run winbindd at debug level 10 and
mail me the output (private mail is probably best).  So just start up
winbindd, run wbinfo -u twice, then kill off winbindd.  This should
generate the minimum amount of log information required to analyse the
problem.

Please, could you run it with "debug timestamp = false" as well.

> This server was supose to be on producction last week and it was working
> for a week I really don't know what is going wrong, is it a winbind bug ?

Have you done anything like change the security settings on the PDC?
There is a RestrictAnonymous registry key you can set to restrict the
amount of information available to anonymouse users.  In win2k there are
some security settings that can mess up winbindd as well.


Tim.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba