[Samba] Solaris 10 winbind authentication with ADS
cj.keist at colostate.edu
Wed Jan 12 14:21:20 MST 2011
Thanks for the replies.
I got this resolved.
It was case of my eyes not seeing what was in front of my face. The
solaris upgrade DID replaced my /usr/lib/nss_winbind.so.1 link with
Solaris's on library of same name. So I just had to rename that and
recreate my link to the samba compiled libnss_winbind.so file. This is
how I have the links done in /usr/lib
-r-xr-xr-x 1 root root 50880 Dec 27 13:14 libnss_winbind.so
lrwxrwxrwx 1 root root 17 Dec 17 15:29
libnss_winbind.so.1 -> libnss_winbind.so
lrwxrwxrwx 1 root root 17 Jan 12 13:58 nss_winbind.so.1
On 1/7/11 5:36 AM, Michael Wood wrote:
> On 6 January 2011 01:11, CJ Keist<cj.keist at colostate.edu> wrote:
>> I did smart thing and upgraded my Solaris box to Solaris 10 update 9.
>> And now my winbind authentication has broken. I have checked all my
>> /usr/lib/*winbind* and /usr/lib/security/*winbind* libs and all are still
>> good from my last install. /etc/pam.conf, nsswitch.conf are still intact.
>> wbinfo seems to work fine. getent passwd username just returns empty.
>> This is what I'm getting in my /var/samba/log/log.winbindd file:
>> [2011/01/05 16:04:00.061446, 2]
>> Could not read client request from fd 22: I/O error
> I don't run Solaris and am not using winbind, so this is just a guess,
> but I hope it helps.
> winbind communicates via a socket, which I think is put in /tmp by
> default (/tmp/.winbindd/ or something like that). Can you check what
> "fd 22" is? e.g. using lsof. Maybe it's the socket.
> It might be that Solaris 10 changes something about /tmp that
> interferes with winbind's socket? Maybe try putting the socket
> somewhere else. I think you're supposed to be able to do this with
> "winbind:socket dir = ...".
> It seems the "winbind:socket dir" option was introduced in Samba 3.2.0.
C. J. Keist Email: cj.keist at colostate.edu
Systems Group Manager Phone: 970-491-0630
Engineering Network Services Fax: 970-491-5569
College of Engineering, CSU
Ft. Collins, CO 80523-1301
All I want is a chance to prove 'Money can't buy happiness'
More information about the samba