[Samba] getent passwd works but all wbinfo commands fail

[steve]

On 25/09/14 19:54, rusking wrote:
> =================================
> realm = IAMTEST.COM
Lose the next line:
> idmap config IAMTEST : schema_mode = rfc2307
> idmap config IAMTEST : range = 30000-40000
> idmap config IAMTEST : default = yes
> idmap config IAMTEST : backend = rid
> ;idmap config IAMTEST : backend = ad
> idmap config * : backend = tdb
> idmap config * : backend = rid
> idmap backend =tdb
> idmap config * : range = 10000-20000
Lose the next 4 lines:
> idmap uid = 10000-20000
> idmap gid = 10000-20000
> idmap backend = idmap_rid:IAMTEST=10000-200000
> winbind nss info = rfc2307
> winbind trusted domains only = no
> winbind enum groups = yes
> winbind enum users = yes
> winbind separator = /
> winbind use default domain = yes
> ;winbind rpc only = yes
> template homedir = /home/share/%U
> template shell = /bin/bash
> ======================================
> I don't what's the error means. When I use 'net ads status', it's wrong, but
> 'net ads info' is ok.
> [root at netfolderserver ~]# net ads status
> Enter root's password:
> [2014/09/26 00:43:16.027751,  0] libads/kerberos.c:333(ads_kinit_password)
>    kerberos_kinit_password root at IAMTEST.COM failed: Client not found in
> Kerberos database

Do you have a domain user called root? It doesn't look like it. Anyway, 
try this instead:
net ads status -UAdministrator

HTH
Steve