[Samba] RE upgraded to samba-3.0.23c = continous password prompts on shares - SOLVED

[Roland Hordos]

>> has anyone gotten 'getent group' to correctly query AD with
samba-3.0.23c?
Yes, my 3.0.23c does on FC5, using DOMAIN security, querying a Win2k AD.
The one setting that made this work for me was "winbind enum groups =
Yes".  My entire global section is below.

Hope this helps.

Roland;

[global]
        workgroup = DOMAIN1
        realm = DOMAIN1.INT
        netbios aliases = TEPROG, TEAFP, TEDATA
        server string = TEAL
        security = DOMAIN
        password server = fp02.tundraeng.int
        log level = 1
        log file = /var/log/samba/%m.log
        include = /etc/samba/smb_ip_debug_%I.conf
        debug pid = yes
        max log size = 50
        socket options = TCP_NODELAY SO_KEEPALIVE SO_RCVBUF=8192
SO_SNDBUF=8192
        printcap name = /etc/printcap
        dns proxy = No
        wins server = FP02
        idmap uid = 16777216-33554431
        idmap gid = 16777216-33554431
        template shell = /bin/bash
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        create mask = 0660
        directory mask = 0770
#       strict locking = yes
#       oplocks = no
#       level2 oplocks = no
        cups options = raw


Typical share:

[Programs]
        path = /home/Shares/Programs
        valid users = "+DOMAIN1\Domain Users"
        read only = No
        level2 oplocks = yes


-----Original Message-----
From: samba-bounces+rolandhordos=tundraeng.com at lists.samba.org
[mailto:samba-bounces+rolandhordos=tundraeng.com at lists.samba.org]On
Behalf Of Elvar
Sent: Sunday, November 19, 2006 12:39 PM
To: Elvar
Cc: samba at lists.samba.org
Subject: [Samba] RE upgraded to samba-3.0.23c = continous password
prompts on shares - SOLVED


I decided to install an older version of Samba (samba-3.0.21b) and it 
worked fine. 'getent group' returned groups from the AD domain like it's

supposed to unlike it does with samba-3.0.23c. My shares are also 
working properly again. So, again, has anyone gotten 'getent group' to 
correctly query AD with samba-3.0.23c? Is it just a problem on FreeBSD
6.1?

Thanks,
Elvar

Elvar wrote:
> I'm convinced nsswitch does not work correctly in FreeBSD 6.1-stable. 
> Can someone please either confirm or deny.
>
> Thanks,
> Elvar
>
> Elvar wrote:
>> Since upgrading to samba 3.0.23c when I try and access the samba 
>> shares it continually prompts me for a username and password. The 
>> samba server has been joined to a win2k3 domain and should be 
>> allowing access based on the windows domain accounts like it used to 
>> be doing, but that is no longer working.
>>
>> Any help would be greatly appreciated.
>>
>>
>> Kind regards,
>> Elvar
>>
>>
>
>


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba