[Samba] SAMBA + KERBEROS + AD

[Oliver Henriot]

Hi,

I have the same problem as Hélio : getent passwd only returns local 
users when wbinfo -u returns domain users.
However, I have installed samba using Debian packages with aptitude.
All I have is :

    # find / -name libnss_winb*
    /lib/libnss_winbind.so.2
    # ls -l /lib/libnss_winbind.so*
    -rw-r--r-- 1 root root 15700 2007-12-10 12:47 /lib/libnss_winbind.so.2

I have tried changing permissions on libnss_winbind.so.2 to 775 and 
adding a /lib/libnss_winbind.so symlink to /lib/libnss_winbind.so.2, all 
to no avail.
The .deb archive in the current stable Debian does not contain 
libnss_winbind.so, only libnss_winbind.so.2.

I have tried compiling Samba from sources and copying the resulting 
libnss_winbind.so to /lib but I still only get local accounts when I run 
getent passwd and getent group.

Is the solution to install the version compiled from sources? Is there 
no way to get the version packaged for the distribution to work?

Cheers,

P.S. I hope my intrusion in Hélio's thread will help both of us to progress

Dans sa grande sagesse, ciro samba a écrit, le 07.03.2008 03:51 :
> Helio,
> have you tested nsswitch with
> `getent passwd`
> should return
>
> root:x:0:0::/root:/bin/bash
> bin:x:1:1:bin:/bin:/bin/false
> daemon:x:2:2:daemon:/sbin:/bin/false
> adm:x:3:4:adm:/var/log:/bin/false
> lp:x:4:7:lp:/var/spool/lpd:/bin/false
> sync:x:5:0:sync:/sbin:/bin/sync
> ... etc
> gdm:x:42:42:GDM:/var/state/gdm:/bin/bash
> apache:x:80:80:User for Apache:/srv/httpd:/bin/false
> messagebus:x:81:81:User for D-BUS:/var/run/dbus:/bin/false
> haldaemon:x:82:82:User for HAL:/var/run/hald:/bin/false
> pop:x:90:90:POP:/:/bin/false
> nobody:x:99:99:nobody:/:/bin/false
> EDITORA\administrator:*:10000:10000:Administrator:/home/EDITORA/administrator:/bin/false
> EDITORA\guest:*:10001:10001:Guest:/home/EDITORA/guest:/bin/false
> etc..;
> your domain users must be mapped to linux users, with "winbind uid", which
> you have in your smb.conf
> if getent does not return domain users at all but wbinfo -u does, the
> problems is with libnss_winbind.so
>
> i download source code into /lib/usr/apps/whatsappname so my samba is in
> /usr/local/apps/samba-3.0.28/ and the correct libnss_winbind.so is
> /usr/local/apps/samba-3.0.28/source/nsswitch/libnss_winbind.so. copy this
> file over /lib/libnss_winbind.so and
> $ cd /lib
> $ ln -s libnss_winbind.so libnss_winbind.so.2
>
> and then getent passwd again, this sould do the trick
>
> tks
> Ciro
>
>
> On Wed, Mar 5, 2008 at 4:05 PM, Helio Calaça Filho <helio.calaca at gmail.com>
> wrote:
>
>   
>> But i have to try with the "+"symbol, just like this exemple?
>>
>> SAMBA+Administrator
>> or
>> i have to try like this way
>>
>> SAMBAAdminitrator
>>
>> ???
>>
>>
>>
>>
>>
>> --
>> Atte,
>> Hélio Calaça Filho
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/listinfo/samba
>>
>>     

-- 
Oliver Henriot, UMS MI2S, http://mi2s.imag.fr/
Moyens Informatiques et Multimédia
Domaine universitaire BP53 / 38041 Grenoble cedex 9 / France
tel.: +33 4 76 51 43 48      fax: +33 4 76 51 47 15

Trust in CNRS's certificates
http://igc.services.cnrs.fr/Doc/General/trust.html 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4046 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.samba.org/archive/samba/attachments/20080307/6eb657f0/smime.bin