[Samba] winbind authentication

Tanguy Bouzéloc tbouzeloc at init-sys.com
Fri May 11 14:46:04 GMT 2007


Hi all,

I'm trying to setup integrate squid to an activedirectory. So I use samba and 
windbind for this.

I successfully initialize kerberos (with kinit) and I see a ticket with klist.

When I start samba, it fails on winbind daemon with the following error :

  winbindd version 3.0.24 started.
  Copyright The Samba Team 2000-2004
[2007/05/11 15:55:17, 0] nsswitch/winbindd_util.c:init_domain_list(518)
  Could not fetch our SID - did we join?
[2007/05/11 15:55:17, 0] nsswitch/winbindd.c:main(1051)
  unable to initalize domain list

My setup is :
	Domain : ALPHALINK-44.FR
	Kdc : TSE-44.ALPHALINK.FR
	
krb5.conf :

[libdefaults]
        default_realm = ALPHALINK-44.FR

[realms]
        ALPHALINK-44.FR = {
        kdc = TSE-44.ALPHALINK-44.FR
        }

[domain_realms]
        .kerberos.server = ALPHALINK-44.FR


smb.conf :

[global]
realm = ALPHALINK-44.FR
workgroup = ALPHALINK
netbios name = PROXYHTTP
password server = TSE-44.ALPHALINK-44.FR
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
idmap uid = 10000-20000
idmap gid = 10000-20000
security = ADS 


I use samba-3.0.24, if anybody have an idea ...

Regards,
Tanguy Bouzéloc.


More information about the samba mailing list