Help! Solaris 8 + winbindd

[Dean Ward]

Hello All,

Hopefully this should be my last question(s) before I can start looking into
implementing Winbind in a live scenario (hurray!)

Firstly, I think there may be a bug in libnss_winbind.so - when performing
any operation involving domain accounts (e.g. chown, who am i, su, login,
etc.) the following error pops up:

ld.so.1: /usr/sbin/quota: fatal: relocation error: file
/usr/lib/nss_winbind.so.1: symbol socket: referenced symbol not found
Killed

(note: nss_winbind.so.1 is linked to libnss_winbind.so).

Any ideas? Platform is Solaris 2.6.

Secondly, is it possible to authenticate using just the username, i.e. not
DOMAIN+UID? If so, what effect would this have on Unix logons with the same
username? e.g. I have an account WINESOC+WardD and an account wardd - if I
type a password that is correct for the Unix account, but not for the NT
account, will I logon with the Unix account?

Finally, where on earth can I get hold of pam_mkhome? I've looked high and
low and it is nowhere to be found :(

Thanks for all your help!

Dean Ward
Info Systems
The Wine Society

> -----Original Message-----
> From:	MCCALL,DON (HP-USA,ex1) [SMTP:don_mccall at hp.com]
> Sent:	28 December 2001 16:22
> To:	'Dean Ward'; 'samba at lists.samba.org'
> Subject:	RE: Re: Help! Solaris 8 + winbindd
> 
> Hi Dean;
> You're right - try editing your Makefile so that the line
> 
> WINBIND_NSS_OBJ = nsswitch/winbind_nss.o nsswitch/wb_common.o
> reads:
> 
> WINBIND_NSS_OBJ = nsswitch/winbind_nss.o nsswitch/wb_common.o
> nsswitch/winbind_nss_solaris.o
> 
> 
> Then remove your libnss_winbind.so and make nsswitch again.
> Hope this helps,
> Don
> 
> -----Original Message-----
> From: Dean Ward [mailto:wardd at thewinesociety.com]
> Sent: Friday, December 28, 2001 8:32 AM
> To: 'samba at lists.samba.org'
> Subject: FW: Re: Help! Solaris 8 + winbindd
> 
> 
> Hello List,
> 
> I'm not too up on my Unix programming as I should be, but having just
> re-compiled the nsswitch directory on a Solaris 2.6 box, it would seem
> that
> the winbind_nss_solaris.c source file is never compiled into
> libnss_winbind.so - could this be why the module does not work on Solaris?
> If this isn't compiled, I can only presume that the module does not show
> the
> correct interface to the Solaris nsswitch subsystem, and therefore Solaris
> can't call anything within it (?).
> 
> Cheers,
> 
> Dean Ward
> Info Systems
> The Wine Society
> 
> > -----Original Message-----
> > From:	Dean Ward 
> > Sent:	27 December 2001 11:55
> > To:	'Steve.Michaels at jhuapl.edu'
> > Cc:	'samba at lists.samba.org'
> > Subject:	Re: Help! Solaris 8 + winbindd
> > 
> > Hi Steve,
> > 
> > I think this is a general problem with Winbind running under Solaris - I
> > get communication to/from our domain controllers and this can be proven
> by
> > using wbinfo -u and -g (which return a list of domain users).
> > 
> > However, I've copied libnss_winbind.so, symbolically linked
> > libnss_winbind.so.1, libnss_winbind.so.2 and nss_winbind.so.1 (that's
> the
> > one that Solaris actually uses according to the nsswitch.conf man pages)
> > and updated nsswitch.conf so that passwd and group have winbind in them
> > (Solaris doesn't use shadow). And guess what! getent passwd and getent
> > group do not return anything but local users. I've not bothered with PAM
> > yet as I'm trying to get one bit working at a time.
> > 
> > Executing truss getent passwd indicates that the nss_winbind.so.1
> library
> > is loaded, but it doesn't open up /tmp/.winbindd/pipe (which is owned by
> > root, so that isn't the problem) to pass Winbind its request.
> > 
> > I'm running Solaris 2.6, latest CVS (from this morning) and still no joy
> -
> > does anybody have any ideas here? I can give more info if required.
> > 
> > Cheers!
> > 
> > Dean Ward
> > Info Systems
> > The Wine Society
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba