[Samba] wbinfo -g/-u error

[luciano_mt]

Please

help me ...

The samba store all UIDs and GIDs of users from AD in Winbind ...
Thus it know the user Test has UID 10000 an so on ...
If I remove samba from domain and include it agaim ... will the information of user/UID be keeped or lost?

Thanks

-----------------------------------------------------
Luciano Andre Baramarchi
Multitask Consultoria Ltda
luciano at multitasknet.com.br
(47) 9911 4484
-----------------------------------------------------

Em 22/02/2006, às 21:09, luciano_mt escreveu:

Hi,

I have a problem with users enumeration on winbind ...
If I run wbinfo -g the system only display :

BUILTIN-System Operators
BUILTIN-Replicators
BUILTIN-Guests
BUILTIN-Power Users
BUILTIN-Print Operators
BUILTIN-Administrators
BUILTIN-Account Operators
BUILTIN-Backup Operators
BUILTIN-Users

But I am joined on Domain COSTACAVALCANTI and there are many groups...

Some queries work ...

[root at server03 samba]# wbinfo -n COSTACAVALCANTI-Administrator
S-1-5-21-153786527-857004153-1838531238-500 User (1)
[root at server03 samba]# wbinfo -S S-1-5-21-153786527-857004153-1838531238-500
10166

[root at server03 samba]# wbinfo -t
checking the trust secret via RPC calls succeeded

When I use  ...

[root at server03 samba]# wbinfo -u
Error looking up domain users

[root at server03 samba]# wbinfo --sequence
SERVER03 : 1
BUILTIN : 1
COSTACAVALCANTI : DISCONNECTED

[root at server03 samba]# wbinfo -m
SERVER03
BUILTIN

I tried put  a password with ...

wbinfo --set-auth-user=COSTACAVALCANTI-Administrator%password

But the problem continue

There are error messagens when I user winbindd -i -d 3

get_sam_group_entries: could not enumerate domain groups! Error: NT_STATUS_ACCESS_DENIED

When I try ...

[root at server03 samba]# wbinfo -g
BUILTIN-System Operators
BUILTIN-Replicators
BUILTIN-Guests
BUILTIN-Power Users
BUILTIN-Print Operators
BUILTIN-Administrators
BUILTIN-Account Operators
BUILTIN-Backup Operators
BUILTIN-Users

The winbindd log display ...

[17701]: request interface version
[17701]: request location of privileged pipe
[17701]: list groups
convert_string_allocate: Conversion error: Incomplete multibyte sequence(?K)
get_sam_group_entries: could not enumerate domain groups! Error: NT_STATUS_ACCESS_DENIED

My system is a REHL 4 ...
[root at server03 samba]# uname -a
Linux server03.costacavalcanti.local 2.6.9-22.0.2.ELsmp #1 SMP Thu Jan 5 17:13:01 EST 2006 i686 i686 i386 GNU/Linux

and samba is ..

[root at server03 samba]# rpm -qa | grep samba
samba-3.0.10-1.4E.2
samba-common-3.0.10-1.4E.2
system-config-samba-1.2.21-1
samba-client-3.0.10-1.4E.2

The smb.conf

# Global parameters
[global]
        workgroup = COSTACAVALCANTI
        realm = COSTACAVALCANTI.LOCAL
        netbios aliases = SRV_HMCC
        server string = Samba Server
        security = DOMAIN
        map to guest = Bad User
        password server = 172.16.1.1
        username map = /etc/samba/username.map
        log file = /var/log/samba/%m.log
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = /etc/printcap
        dns proxy = No
        wins server = 172.16.1.1
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind separator = -
        winbind use default domain = Yes
        recycle:maxsize = 1000000000
        recycle:noversions = .doc|.xls|.ppt
        recycle:versions = True
        recycle:keeptree = True
        recycle:exclude = *.tmp *.temp *.o *.obj ~$* *.mpg *.mpeg *.mp3 *.wav *.wmv *.pps
        guest ok = Yes
        cups options = raw
        veto files = lost+found
        vfs objects = recycle


The AD server is Windows 2003 Server with SP1 ...

I need help ...

Thanks ...

Luciano


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba