[Samba] Configuring Samba as a file server to use AD authentication

[Rowland Penny]

On Thu, 25 Aug 2016 15:29:46 +0000
Kyle Manel via samba <samba at lists.samba.org> wrote:

> Thanks for the information,
> 
> I am unclear how to implement the winbind 'rid' backend.  I've
> identified that winbindd is not operating on my demo server (fresh
> installation of Ubuntu 16), and am looking for some assistance if
> possible.
> 
> 1] 'apt-get install winbind' informs me that the package is already
> installed (v4.3.9), yet it is not operating; 2] Lsof -Pnl +M -i4
> provides: root at smb-srv:/home/inbay# lsof -Pnl +M -i4
> COMMAND    PID     USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
> dhclient  2976        0    6u  IPv4  20143      0t0  UDP *:68
> lwsmd     3217        0   17u  IPv4  59606      0t0  TCP
> 10.10.40.164:35156->10.10.20.93:445 (ESTABLISHED) lwsmd
> 3231        0   24u  IPv4  64193      0t0  TCP
> 10.10.40.164:40020->10.10.20.92:3268 (ESTABLISHED) lwsmd
> 3231        0   26u  IPv4  64244      0t0  TCP
> 10.10.40.164:46136->10.10.20.93:389 (ESTABLISHED) lwsmd
> 3231        0   32u  IPv4  64190      0t0  TCP
> 10.10.40.164:46130->10.10.20.93:389 (ESTABLISHED) sshd
> 9140        0    3u  IPv4  37379      0t0  TCP *:22 (LISTEN) nmbd
> 28134        0   16u  IPv4  62715      0t0  UDP *:137 nmbd
> 28134        0   17u  IPv4  62716      0t0  UDP *:138 nmbd
> 28134        0   18u  IPv4  62718      0t0  UDP 10.10.40.164:137
> nmbd     28134        0   19u  IPv4  62719      0t0  UDP
> 10.10.40.255:137 nmbd     28134        0   20u  IPv4  62720      0t0
> UDP 10.10.40.164:138 nmbd     28134        0   21u  IPv4  62721
> 0t0  UDP 10.10.40.255:138 smbd     28247        0   37u  IPv4
> 63448      0t0  TCP *:445 (LISTEN) smbd     28247        0   38u
> IPv4  63449      0t0  TCP *:139 (LISTEN) sshd     28317        0
> 3u  IPv4  63824      0t0  TCP 10.10.40.164:22->10.10.40.178:65205
> (ESTABLISHED) sshd     28397     1000    3u  IPv4  63824      0t0
> TCP 10.10.40.164:22->10.10.40.178:65205 (ESTABLISHED)
> 
> 3] To start winbindd I visited this site
> https://ubuntuforums.org/showthread.php?t=1865647 which informed to
> run 'net ads join -U administrator' with my own id, which returns:
> 'Joined 'SMB-SRV-001' to dns domain 'domain' No DNS domain configured
> for SMB-SRV.  Unable to perform DNS update.  DNS update failed:
> NT_STATUS_INVALID_PARAMETER'
> 
> Upon review of the [3] winbindd is still not implemented, and I would
> like to know how to get it running, as from my understanding it is
> part of the samba package, and I will require it.
> 
> 

Firstly, can I make a recommendation, forget Ubuntu forums, read the
Samba wiki or ask here instead ;-)

Just joining a machine to the domain will not start winbind, this is
just like any of the Samba binaries, it needs to be started by
whatever your OS uses to start programs. I think the problem is that
Debian uses a script called 'samba', this starts two other scripts
'smbd' and 'nmbd', it does not start winbind. I think if you look, you
will find there is another script called 'winbind', guess what this
does ? ;-)
Do what ever you do to start samba, but replace 'samba' with
'winbind', it should then start.
I haven't a clue how you start packages on Ubuntu now, I don't use it.

You could always reboot the server, just like the person in your link
did, this is what started winbind, not the join.

Rowland