Winbindd!

[Osman Tufanogullari (Garanti Teknoloji)]

Many Thanks Tim for your quick response...

After sending the mail below, I ran Winbindd with -d3 -i options and i saw that winbindd was looking for the PDCs' IP adresses of the trusted domains... The first file winbindd was looking into was lmhosts...

So, I wrote the domain controllers' IP adresses of the trusted domains into the lmhosts file in the format 

IPadrssofPDC Domain-Name

This fixed the problem... 

But there is another problem now... Our company has ten thousands of user and thousands of groups.. user count is about 15000...
Sometimes winbindd crashes...I run winbindd deamon, but sometimes later when i use ps -ef, i cannot see ./winbindd in the list. It kills itself somehow but i dont know... But sometimes it is in the list running for hours...

One more question. Today i also work on it but when you look into a share's properties on NT or 2000 desktop, there is a Security tab on this panel... 

If you have a share on a linux server ( intented to use as a file & print server ), from a windows NT or 2000 desktop,

Can we define security  parameters (adding and deleting user with read/write rights) using that panel?

Thanks in advance...




-----Original Message-----
From: Tim Potter [mailto:tpot at samba.org]
Sent: Wednesday, June 19, 2002 2:35 AM
To: Osman Tufanogullari (Garanti Teknoloji)
Cc: samba-technical at lists.samba.org
Subject: Re: Winbindd!


On Tue, Jun 18, 2002 at 01:55:44PM +0300, Osman Tufanogullari (Garanti Teknoloji) wrote:

> But after starting winbindd deamon, 
> 
> wbinfo -m ( trusted domain names ) --> OK 
> wbinfo -t ( check secret ) --> OK 
> wbinfo -n username ( sid from username ) --> OK 
> wbinfo -s sid ( username from sid) --> OK 
> 
> options work properly.
> 
> But 
> 
> wbinfo -u and wbinfo -g end with error 
> "Error looking up domain users",
> "Error looking up domain groups".

Are you running with the RestrictAnonymous registry setting?
Alternately are you running a Windows 2000 environment only?

You may need to set a username and password for winbindd so it can
connect to the domain controllers without using an anonymous session.


Tim.