[Samba] Samba + Winbind + Windows 2003 AD

[Michael Wood]

On 18 July 2010 01:34, Henrik Dige Semark <hds at semark.dk> wrote:
> Hey out there.
>
> I have to join my UNIX server with an existing Win2k3 AD network.
>
> My system info:
> Debian Lenny
> Samba   - 3.4.8
> Winbind - 3.4.8
>
> Windows Server 2003 with 2000-style-AD
>
> My problem is that, I have en UNIX server that have to run auth up against
> our existing windows 2003 AD.
>
> I have successfully joined my UNIX server to the AD, without problems.
> # net ads join -U Administrator
> Enter Administrator's password:
> Using short domain name -- TEST
> Joined 'MAIL' to realm 'TEST.LOCAL'
>
> My Samba config: http://pastebin.com/ZqaA0Ypn
>
> After the join I'm able to lookup peoples with
> # wbinfo -u
[...]
> # wbinfo -g
[...]
>
> Now the problem, getent only returns the local users and not the users from
> the AD
> The funny thing is that if a user is local on the UNIX and in the AD, I can
> login with the password from both local and AD, so I know that it can lookup
> people and passwords
>
> # getent passwd hs ; echo $?
> 2
>
> When I debug on getent it returns 2, witch means that it can't find the
> user.

Do you have winbind specified in your nsswitch.conf file as mentioned here:

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html#id2654732

-- 
Michael Wood <esiotrot at gmail.com>