[Samba] samba active directory question

[Fontenot, Jeri]

We are migrating to 2008 Active Directory and in making changed to
smb.conf and krb5.conf and restarting smb services I get below error in
the winbindd.log:

Winbind won't start

[2011/04/07 15:03:09, 1] nsswitch/winbindd.c:main(979)

  winbindd version 3.0.22-13.16-SUSE-SLES10 started.

  Copyright The Samba Team 2000-2004

[2011/04/07 15:03:09, 0]
nsswitch/winbindd_util.c:winbindd_upgrade_idmap(1195)

  idmap_convert: Unable to open idmap database

[2011/04/07 15:03:09, 1] nsswitch/winbindd.c:main(1012)

  Could not init idmap -- netlogon proxy only

[2011/04/07 15:03:09, 0] nsswitch/winbindd_util.c:init_domain_list(522)

  Could not fetch our SID - did we join?

[2011/04/07 15:03:09, 0] nsswitch/winbindd.c:main(1076)

  unable to initalize domain list

[2011/04/07 15:03:33, 1] nsswitch/winbindd.c:main(979)

  winbindd version 3.0.22-13.16-SUSE-SLES10 started.

  Copyright The Samba Team 2000-2004

[2011/04/07 15:03:33, 0]
nsswitch/winbindd_util.c:winbindd_upgrade_idmap(1195)

  idmap_convert: Unable to open idmap database

[2011/04/07 15:03:33, 1] nsswitch/winbindd.c:main(1012)

  Could not init idmap -- netlogon proxy only

[2011/04/07 15:03:33, 0] nsswitch/winbindd_util.c:init_domain_list(522)

  Could not fetch our SID - did we join?

[2011/04/07 15:03:33, 0] nsswitch/winbindd.c:main(1076)

  unable to initalize domain list

 

Here is the change in smb.conf file, esatest being the AD test domain.

<       workgroup = ESATEST

---

>       workgroup = LANGROUP

27c27

<       realm = esa.test

---

>       realm = EFW.COM

 

Here is the krb5.conf changes made:

 

<       default_realm = EFW.COM

---

>       default_realm = esa.test

5a6,10  (below was inserted, leaving the old realms also in place)

> esa.test = {

>       kdc = 10.1.32.58

>       default_domain = esa.test

>       admin_server = 10.1.32.58

> }

20a26

>         .esatest = esa.test


______________________________________________________________________________________
The information contained in this email transmission may contain proprietary and business 
sensitive information.  If you are not the intended recipient, you are hereby notified that 
any review, dissemination, distribution or duplication of this communication is strictly 
prohibited.  Unauthorized interception of this e-mail is a violation of law.  If you are not 
the intended recipient, please contact the sender by reply email and immediately destroy all 
copies of the original message.

Any technical data and/or information provided with or in this email may be subject to U.S. 
export controls law.  Export, diversion or disclosure contrary to U.S. law is prohibited.  
Such technical data or information is not to be exported from the U.S. or given to any foreign
person in the U.S. without prior written authorization of Elbit Systems of America and the 
appropriate U.S. Government agency.