[Samba] Re: Finally winbind on RH9 working, but why ?

[jo at neolabs.be]

OKOKOKOKOK COOL:

could you tell me where all those nice groups like 

> DHCP Users
> DHCP Administrators
> WINS Users
> Domain Computers
> Domain Controllers
> Schema Admins
> Enterprise Admins
> Cert Publishers

come from ? Where do you define these. I DO guess you have
configure them? Think we're getting there... *grin*

Thanks

Jo



On Tue, 5 Aug 2003 10:42:50 -0500 "Lahners, Jeremy" wrote:

> [root at MaryAnn admin]# wbinfo -u
> administrator
> Guest
> TsInternetUser
> 
> [root at MaryAnn admin]# wbinfo -g
> DHCP Users
> DHCP Administrators
> WINS Users
> Domain Computers
> Domain Controllers
> Schema Admins
> Enterprise Admins
> Cert Publishers
> Domain Admins
> Domain Users
> Domain Guests
> 
> Jeremy Lahners
> Manager, I.T.
> The Schemmer Associates Inc.
> (402) 493-4800 (P)
> (402) 493-7951 (F)
> 
> 
> -----Original Message-----
> From: jo at neolabs.be [mailto:jo at neolabs.be] 
> Sent: Tuesday, August 05, 2003 10:40 AM
> To: Lahners, Jeremy
> Cc: samba at lists.samba.org
> Subject: Re: Finally winbind on RH9 working, but why ?
> 
> No... just tested it :(
> 
> if you have time : does you output of wbinfo resembles this :
> 
> [root at client root]# wbinfo -u
> root
> jo
> [root at client root]# wbinfo -g
> Domain Admins
> Domain Users
> 
> 
> I REALLY wonder where these groups are stored on the pdc... I find
> no trace of them in /etc/samba/smbpasswd or anywhere...
> 
> 
> 
> 
> 
> 
> On Tue, 5 Aug 2003 10:08:13 -0500 "Lahners, Jeremy" wrote:
> 
> > I don't have winbind under shadow.  I don't know if that would matter
> or
> > not.
> > 
> > Jeremy Lahners
> > Manager, I.T.
> > The Schemmer Associates Inc.
> > (402) 493-4800 (P)
> > (402) 493-7951 (F)
> > 
> > 
> > -----Original Message-----
> > From: jo at neolabs.be [mailto:jo at neolabs.be] 
> > Sent: Tuesday, August 05, 2003 10:05 AM
> > To: Lahners, Jeremy
> > Cc: samba at lists.samba.org
> > Subject: Re: Finally winbind on RH9 working, but why ?
> > 
> > Thanks for the reply ! But no such luck : 
> > 
> > 
> > #group:     db files nisplus nis
> > 
> > passwd:     files winbind
> > shadow:     files winbind
> > group:      files winbind
> > 
> > #hosts:     db files nisplus nis dns
> > hosts:      files dns
> > 
> > # Example - obey only what nisplus tells us...
> > #services:   nisplus [NOTFOUND=return] files
> > 
> > 
> > *grin*
> > 
> > 
> > 
> > 
> > 
> > 
> > On Tue, 5 Aug 2003 09:34:27 -0500 "Lahners, Jeremy" wrote:
> > 
> > > I had similar problems with getent on one of my servers.  After some
> > > investigation, I had forgotten to edit /etc/nsswitch.conf to add
> > winbind
> > > to the users and groups there.  Wbinfo worked great, nothing from
> > > getent.  After the change, and a restart of winbind (don't know if
> > that
> > > was necessary or not) all was well.
> > > 
> > > Jeremy Lahners
> > > jlahners at schemmer.com
> > > The Schemmer Associates Inc.
> > > 
> > 
> > 
> > 
> > 
> > > <jo at neolabs.be> wrote in message
> > > news:<200308042108.h74L81B09307 at neo1.neolabs.be>...
> > > Maybe I'll rephrase it shorter :
> > > 
> > > 1) eventhough 'wbinfo -g' gives me the correct groups, they do not
> > show
> > > up when I go 'getent group'. Can it be the spaces in the Samba
> groups
> > > 'Domain Admins' and 'Domain Users'? Where is the information 
> > > about these groups stored on the Samba pdc?
> > > 
> > > 2) I only get winbind to do it's job (which is connecting to a local
> > > share on the domain member with a winbind user) when I
> > > a) set the parameter 'winbind cache timeout = 0'
> > > OR
> > > b) create the user locally on the domain member, which is of course
> > what
> > > we try to avoid by using winbind... 
> > > 
> > > any idea's why playing with the cache timeout causes a difference?
> > > 
> > > Thanks in advance...
> > > 
> > > the full story is below but I guess it's to long for anyone to read
> > > *grin*
> > > 
> > > Jo De Baer
> > 
> > NEOlabs - http://www.neolabs.be - mailto:info at neolabs.be
> 
> NEOlabs - http://www.neolabs.be - mailto:info at neolabs.be

NEOlabs - http://www.neolabs.be - mailto:info at neolabs.be