winbindd problem

[Richard Sharpe]

On Fri, 12 Apr 2002, Richard Sharpe wrote:

> On Thu, 11 Apr 2002, Orwig, Paul wrote:
> 
> > Just so I understand...
> > The fact that wbinfo -t replies with "secret is good" says that it is able
> > to talk to the domain controller and should be able to request users/group
> > listing. Right?
> 
> Well, yes, but, as Tim pointed out in response to my erroneous statement, 
> the fact that wbinfo -t says that the secret is good means that the trust 
> account secrets stored in tdb are OK.
> 
> winbindd uses anonymous connections to retrieve its information by 
> default, unless you have told it a valid account and password on the 
> DC[s].

BTW, this functioanlity is only in 2.2.4pre, I think.

> In the presence of restrict-anonymous, this will not work, and if some of 
> your DCs have restrict-anonymous set and some not, you may get 
> intermittent failures.

-- 
Regards
-----
Richard Sharpe, rsharpe at ns.aus.com, rsharpe at samba.org, 
sharpe at ethereal.com