Samba4 file server status
Richard Sharpe
realrichardsharpe at gmail.com
Fri Aug 16 08:11:17 MDT 2013
On Fri, Aug 16, 2013 at 5:30 AM, Juan Pablo Lorier <jplorier at gmail.com> wrote:
> Hi Steve,
Heh,
> getent password shows only system users, though wbinfo -u shows all
> domain users including graficos.
>
> nsswitch is configured as described in the tutorials:
>
> passwd: files winbind
> shadow: files winbind
> group: files winbind
Are the shared libraries in the correct place?
> thanks
>
> On 15/08/13 15:51, Richard Sharpe wrote:
>> On Thu, Aug 15, 2013 at 11:20 AM, Juan Pablo Lorier <jplorier at gmail.com> wrote:
>>> Thank steve,
>>>
>>> As part of the later test I've run authconfig-tui again an it added the
>>> range for me, so it's not the problem.
>>> I also removed the ticket and re create it plus rejoined the domain. Now
>>> in the client it shows a more clear message (from a linux box)
>>>
>>> [2013/08/14 13:37:32.848144, 3] auth/auth_util.c:1121(check_account)
>>> Failed to find authenticated user CANAL4\graficos via getpwnam(),
>>> denying access.
>>>
>>> But the user exists and works on several workstations for domain login.
>> What does 'getent passwd | grep $USERNAME' show on that machine? Can
>> winbindd find it?
>>
>> Is /etc/nsswitch.conf set up correctly?
>>
>>> Also I noticed that the errors differ depending on the workstation I use
>>> to connect. Windows terminals fails without much info (that I can
>>> understand) in the log, but linux fails with the denying access from above.
>>>
>>> So far I've checked everything I know from the samba wiki, red hat docs
>>> and web tutorials and everything seems to work but the share keeps
>>> rejecting logins.
>>>
>>> Regards
>>>
>>>
>>> On 14/08/13 12:31, steve wrote:
>>>> On Wed, 2013-08-14 at 12:21 -0300, Juan Pablo Lorier wrote:
>>>>
>>>>
>>>>
>>>> idmap * range missing:
>>>>
>>>> idmap config CANAL4 :range = 10000000-19999999
>>>> idmap config CANAL4 :backend = ad
>>>> idmap config CANAL4 :schema_mode = rfc2307
>>>> idmap config * : backend = tdb
>>>>
>>>> add, e.g.
>>>> idmap config * :range = 1000-1002
>>>>
>>>>
>>>>
>>>>
>>
>>
>
--
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)
More information about the samba-technical
mailing list