[Samba] winbind authentication
Tanguy Bouzéloc
tbouzeloc at init-sys.com
Fri May 11 14:46:04 GMT 2007
Hi all,
I'm trying to setup integrate squid to an activedirectory. So I use samba and
windbind for this.
I successfully initialize kerberos (with kinit) and I see a ticket with klist.
When I start samba, it fails on winbind daemon with the following error :
winbindd version 3.0.24 started.
Copyright The Samba Team 2000-2004
[2007/05/11 15:55:17, 0] nsswitch/winbindd_util.c:init_domain_list(518)
Could not fetch our SID - did we join?
[2007/05/11 15:55:17, 0] nsswitch/winbindd.c:main(1051)
unable to initalize domain list
My setup is :
Domain : ALPHALINK-44.FR
Kdc : TSE-44.ALPHALINK.FR
krb5.conf :
[libdefaults]
default_realm = ALPHALINK-44.FR
[realms]
ALPHALINK-44.FR = {
kdc = TSE-44.ALPHALINK-44.FR
}
[domain_realms]
.kerberos.server = ALPHALINK-44.FR
smb.conf :
[global]
realm = ALPHALINK-44.FR
workgroup = ALPHALINK
netbios name = PROXYHTTP
password server = TSE-44.ALPHALINK-44.FR
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
idmap uid = 10000-20000
idmap gid = 10000-20000
security = ADS
I use samba-3.0.24, if anybody have an idea ...
Regards,
Tanguy Bouzéloc.
More information about the samba
mailing list