[Samba] problems with pam_winbind, that is linux box to samb a remote server

Vizitiu, Ciprian CVizitiu at gbif.org
Fri Apr 4 11:15:26 GMT 2003


It looks like the winbind "client" will NOT natively auth you against a
samba PDC. After 2 days of browsing through lists it looks like the cause is
this: (Kevin Stefanik)

"winbindd gets a list of domain controllers via 
broadcast and then confirms each directly with a unicast query to the 
controller itself (in cm_get_dc_name in winbindd_cm.c) specifically querying

the 0x1c role.  That query is coming into nmbd as a unicast query."

The solution (that worked for me) seems to be a small patch by Volker
Lendecke:

--- nmbd/nmbd_logonnames.c      30 Jan 2002 06:08:22 -0000      1.11
+++ nmbd/nmbd_logonnames.c      6 Oct 2002 09:58:09 -0000
@@ -139,6 +139,7 @@
 void add_logon_names(void)
 {
   struct subnet_record *subrec;
+  struct nmb_name nmbname;
   for (subrec FIRST_SUBNET; subrec; subrec
NEXT_SUBNET_INCLUDING_UNICAST(subrec))
   {
@@ -146,7 +147,6 @@
     if (work && (work->log_state LOGON_NONE))
     {
-      struct nmb_name nmbname;
       make_nmb_name(&nmbname,global_myworkgroup,0x1c);
       if (find_name_on_subnet(subrec, &nmbname, FIND_SELF_NAME) NULL)
@@ -162,4 +162,6 @@
       }
     }
   }
+  make_nmb_name(&nmbname,global_myworkgroup,0x1c);
+  insert_permanent_name_into_unicast(FIRST_SUBNET, &nmbname, 0x1c);
 }


> Greetings,
> 
> Maybe someone tried to make linux box authorize with pam_winbind to 
> remote samba server ?
> 
> The problem is that when I log in my id is not resolved to 
> username, whoami shows "whoami: cannot find username for UID 10280"



More information about the samba mailing list