[Samba] FW: Samba 2.2.8a / Winbind and Domains

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Petty, Robert wrote:

| 1) Can I override and prohibit the querying of trusted domains and
limit the
| queries to the domain which winbind is a member of?

I would need to see the winbindd log file to understand
why it is contacting the other domains.  Can you send me
a level 10 debug log for winbindd off list?

| 2) Can I increase the time that a challenge is valid?  Right now, if I
| remain inactive for around ten seconds, the next access to any shares
| requires a revalidation via winbind.  This is time consuming and very
| frusterating.

Try

~  winbind cache time = 600

| [global]
|         workgroup = DEN1
|         netbios name = classfs
|         interface = classfs
|         interfaces = classfs/255.255.255.0
|         bind interfaces only = Yes
|         security = domain
|         encrypt passwords = Yes
|         password server = *
|         server string = Samba (%v) domain (%h)
|         template homedir = /usr/local/samba/home/%D/%U
|         lock dir = /dna/samba/locks
|         pid directory = /dna/samba/var/locks
|         log file = /var/opt/samba/smb.log
|         wins server = 10.39.9.1 10.39.10.1

2.2.x will only work correctly with one wins server.
3.0 support multiple WINS servers.

|         winbind uid = 19000-21000
|         winbind gid = 19000-19000
|         winbind enum users = yes
|         winbind enum groups = yes
|         winbind use default domain = true
|         allow trusted domains = no
|         keepalive = 300



~ ----------------------------------------------------------------------
~ Hewlett-Packard            ------------------------- http://www.hp.com
~ SAMBA Team                 ---------------------- http://www.samba.org
~ GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
~ "You can never go home again, Oatman, but I guess you can shop there."
~                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/ev1JIR7qMdg1EfYRAvCIAJ0Z0iVLmpfB6ydoIELIpZF92/70gACglyMt
iGAW+GMvGU3CwlUooxsYZKc=
=prsB
-----END PGP SIGNATURE-----