Samba4 file server status

Richard Sharpe realrichardsharpe at gmail.com
Fri Aug 16 08:11:17 MDT 2013


On Fri, Aug 16, 2013 at 5:30 AM, Juan Pablo Lorier <jplorier at gmail.com> wrote:
> Hi Steve,

Heh,

> getent password shows only system users, though wbinfo -u shows all
> domain users including graficos.
>
> nsswitch is configured as described in the tutorials:
>
> passwd: files winbind
> shadow: files winbind
> group: files winbind

Are the shared libraries in the correct place?

> thanks
>
> On 15/08/13 15:51, Richard Sharpe wrote:
>> On Thu, Aug 15, 2013 at 11:20 AM, Juan Pablo Lorier <jplorier at gmail.com> wrote:
>>> Thank steve,
>>>
>>> As part of the later test I've run authconfig-tui again an it added the
>>> range for me, so it's not the problem.
>>> I also removed the ticket and re create it plus rejoined the domain. Now
>>> in the client it shows a more clear message (from a linux box)
>>>
>>> [2013/08/14 13:37:32.848144,  3] auth/auth_util.c:1121(check_account)
>>>   Failed to find authenticated user CANAL4\graficos via getpwnam(),
>>> denying access.
>>>
>>> But the user exists and works on several workstations for domain login.
>> What does 'getent passwd | grep $USERNAME' show on that machine? Can
>> winbindd find it?
>>
>> Is /etc/nsswitch.conf set up correctly?
>>
>>> Also I noticed that the errors differ depending on the workstation I use
>>> to connect. Windows terminals fails without much info (that I can
>>> understand) in the log, but linux fails with the denying access from above.
>>>
>>> So far I've checked everything I know from the samba wiki, red hat docs
>>> and web tutorials and everything seems to work but the share keeps
>>> rejecting logins.
>>>
>>> Regards
>>>
>>>
>>> On 14/08/13 12:31, steve wrote:
>>>> On Wed, 2013-08-14 at 12:21 -0300, Juan Pablo Lorier wrote:
>>>>
>>>>
>>>>
>>>> idmap * range missing:
>>>>
>>>>   idmap config CANAL4 :range = 10000000-19999999
>>>>     idmap config CANAL4 :backend = ad
>>>>     idmap config CANAL4 :schema_mode = rfc2307
>>>>     idmap config * : backend = tdb
>>>>
>>>> add, e.g.
>>>> idmap config * :range = 1000-1002
>>>>
>>>>
>>>>
>>>>
>>
>>
>



-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)


More information about the samba-technical mailing list