[Samba] winbind - users missing from groups
Chris Coffey
ccoffey at ci.flagstaff.az.us
Wed Sep 13 14:57:15 GMT 2006
Hello All!
I'm pulling my hair out as I cannot figure out why I'm missing users
from many groups after integrating and re-integrating over and over.
Example, AD group: Domain Users, has 400 users in it , but after
integrating and performing command:
[EMAIL PROTECTED] samba]# getent group | grep "Domain User"
COF+Domain Users:x:16777223:COF+gisguest
Check it out one user! Also I do a: getent group | grep "Domain
Admin"
and I'm missing and like 2 other admins are missing from the group.
At this point I'm not sure whether I'm missing groups, or just users
from groups. But this will not due having missing users.
Weird logs that may mean something to you:
winbindd.log:
[2006/08/10 08:08:43, 1]
nsswitch/winbindd_group.c:winbindd_getgroups(1032)
user 'root' does not exist
Is winbind trying to authenticate as root intead of Administrator of
the domain?
[2006/08/10 08:13:44, 0]
libsmb/cliconnect.c:cli_session_setup_spnego(764)
Kinit failed: Client not found in Kerberos database
Also ...
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Pre-Windows 2000 Compatible Access !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Guests !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Backup Operators !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Print Operators !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Account Operators !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Replicator !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Server Operators !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Users !?
[2006/08/10 08:28:56, 1] nsswitch/winbindd_ads.c:enum_dom_groups(282)
No rid for Administrators !?
Please help, I would really appreciate it, thanks! :)
Chris Coffey
Application Support Specialist
Information Technology
928-779-7685 x7204
More information about the samba
mailing list