[Samba] Groups and Samba and Winbind

[Jennifer Fountain]

Thanks scott.
I am going to try the pam restrictions to see if that helps!
-----Original Message-----
From: Scott Wrosch [mailto:swrosch at MarketingAssociates.com]
Sent: Wednesday, October 30, 2002 1:52 PM
To: Jennifer Fountain; samba at lists.samba.org
Subject: RE: [Samba] Groups and Samba and Winbind


Hello Jennifer,

I'm a relative noob to Samba, so I may be off base, but I'll offer what I
can.

Unless it's a mis-type, re-type the groups command like this:

groups ntdomain\jfountain

Also, I've found that I need to use the domain as well when I'm using wbinfo
as you have below.  For instance, when I run it, I get this:

[root at linux-38 samba]# wbinfo -r ma_swros
10000
10011
[root at linux-38 samba]#

I'm sure there's a switch though for converting from numbers to names.
Also, the -r switch does resolve to UNIX numbers, not names.

Unfortunately, I don't know why groups would be returning the UNIX group
number.  Mine looks like this:

[MA_swros at linux-38 swros]$ groups
MA_Domain Users MA_mis
[MA_swros at linux-38 swros]$

And, here's my Winbind related portion of smb.conf for comparison:

# Winbind entires.
   winbind separator = _
   winbind uid = 10000-20000
   winbind gid = 10000-20000
   winbind enum users = yes
   winbind enum groups = yes
   template shell = /bin/bash

# Tell Samba that yes, it does need to obey pam restrictions
   obey pam restrictions = yes


When I initially got everything up and running, I was using the \ as my
separator as well.  Unfortunately I had issues with it and changed it to the
_.   I doubt that has anything to do with it, but it is possible.

Hope my meaningless drivel has helped some, even though I'm really only
offering comparisons.

Regards,
Scott

Scott Wrosch
desk 248.333.7700 x227
pager 248.806.7657
text 2488067657 at paging.acswireless.com
email swrosch at marketingassociates.com
 
"Our greatest glory is not in never falling
but in rising every time we fall." -- Confucius

-----Original Message-----
From: Jennifer Fountain [mailto:JFountain at rbinc.com] 
Sent: Wednesday, October 30, 2002 1:38 PM
To: samba at lists.samba.org
Subject: [Samba] Groups and Samba and Winbind

I am having an issue with winbind/samba and my groups.

when I type the following:

$ groups ntdomain\\jfountain

I get the following nothing.

When i type this (logged in as jfountain)

$ groups 

I get the following:

$ 50000

I am assuming this means domain admins.

when i type

$./wbinfo -r jfountain

I get the following:

50016
50017
50018
50019
50020
50021
50010
50022
50023
50000

I don't know where the disconnect is in winbind.  why iam not getting my
group listing instead of numbers

wbinfo -g gets all the groups with no problem.

here is my smb.conf

[global]
	workgroup = ntdomain
	netbios name = samba
	server string = SAMBA
	interfaces = lan4 127.0.0.1
	bind interfaces only = Yes
	security = DOMAIN
	encrypt passwords = Yes
	password server = server1
	username map = /etc/smbusers
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	preferred master = False
	local master = No
	domain master = False
	wins server = 11.1.7.2
	winbind uid = 40000-49999
	winbind gid = 50000-59999
	template shell = /usr/bin/ksh
	winbind separator = \
	winbind cache time = 15
	winbind enum users = Yes
	winbind enum groups = Yes
	winbind use default domain = Yes

my nsswitch.conf

passwd:  files winbind
groups:   files winbind

Any thoughts, ideas? what did i not do? 

Thanks!!!
Jenn

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba