[Samba] getent passwd strange behavior
Puyal Tolosa, Noé
npuyal at valls.cat
Wed Apr 13 01:41:05 MDT 2011
Good morning
Just after telling you I had no problems with getent I updated to 3.5.6
and I am having similar issues as the ones you have described.
I will give a try to Sernet-Samba 3.4.12 and I will tell my experience.
El lun, 11-04-2011 a las 12:25 +0200, Zabel, Daniel escribió:
> Hi Noé,
>
>
>
> thank you for your quick reply.
>
> cvadmin is a domain user.
>
>
>
> Interesting that you have no problems using the old schema.
>
> If I try in /etc/samba/smb.conf
>
>
>
> [global]
>
>
>
> workgroup = MYDOMAIN
>
> password server = ldap.mydomain.com
>
> realm = MYDOMAIN.COM
>
> security = ads
>
> idmap uid = 100-500000
>
> idmap gid = 100-500000
>
> idmap backend = ad
>
> winbind nss info = rfc2307
>
> winbind normalize names = yes
>
> winbind use default domain = true
>
> winbind offline logon = false
>
> winbind cache time = 180
>
> winbind enum users = yes
>
> winbind enum groups = yes
>
> winbind nested groups = Yes
>
>
>
> No domainuser could be resolved anymore. Same config work on our other samba servers.
>
>
>
> /var/log/samba/log.winbind-idmap shows:
>
>
>
> [2011/04/11 12:24:13.560317, 3, effective(0, 0), real(0, 0)] libsmb/namequery.c:1880(get_dc_list)
>
> get_dc_list: preferred server list: ", *"
>
> [2011/04/11 12:24:13.560365, 3, effective(0, 0), real(0, 0)] libsmb/namequery.c:1119(resolve_lmhosts)
>
> resolve_lmhosts: Attempting lmhosts lookup for name *<0x1c>
>
> [2011/04/11 12:24:13.560467, 3, effective(0, 0), real(0, 0)] libsmb/namequery_dc.c:169(rpc_dc_name)
>
> Could not look up dc's for domain *
>
> [2011/04/11 12:24:13.560487, 0, effective(0, 0), real(0, 0)] libads/ldap.c:337(ads_find_dc)
>
> ads_find_dc: no realm or workgroup! Don't know what to do
>
> [2011/04/11 12:24:13.560505, 1, effective(0, 0), real(0, 0)] winbindd/idmap_ad.c:143(ad_idmap_cached_connection_internal)
>
> ad_idmap_init: failed to connect to AD
>
> [2011/04/11 12:24:13.560518, 1, effective(0, 0), real(0, 0)] winbindd/idmap_ad.c:543(idmap_ad_sids_to_unixids)
>
> ADS uninitialized: Invalid parameter
>
> [2011/04/11 12:24:13.560564, 3, effective(0, 0), real(0, 0)] winbindd/idmap.c:684(idmap_new_mapping)
>
> default domain not writable
>
>
>
> Cheers,
>
>
>
> Daniel
>
>
>
> Von: Noé Puyal [mailto:npuyal at valls.cat]
> Gesendet: Montag, 11. April 2011 10:41
> An: Zabel, Daniel
> Betreff: Re: [Samba] getent passwd strange behavior
>
>
>
> Hi Daniel
>
> First of all, one question, cvadmin is a domain user or local user?
>
> If cvadmin is a local user you should raise the 100 to a number after the last UID and GID.
>
> Also, as you said, I have all my samba servers with old idmap schema working properly.
>
> Good morning
>
> El lun, 11-04-2011 a las 09:38 +0200, Zabel, Daniel escribió:
>
>
>
> idmap uid = 100-500000
>
> idmap gid = 100-500000
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
More information about the samba
mailing list