[Samba] Windows pre-requisites for login with winbind?
A. James Lewis
james at fsck.co.uk
Mon Aug 21 15:37:03 UTC 2017
OK, obviously I am slightly sanitising the output here, but I'm preserving the case, and just replacing local names with generic ones as I did for the config.
# more /etc/hostname
# more /etc/hosts
# The following lines are desirable for IPv6 capable hosts
::1 ip6-localhost ip6-loopback
# more /etc/resolv.conf
# more /etc/nsswitch.conf
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
passwd: compat winbind
group: compat winbind
hosts: files dns
protocols: db files
services: db files
ethers: db files
rpc: db files
August 21, 2017 3:54 PM, "Rowland Penny via samba" <samba at lists.samba.org> wrote:
> On Mon, 21 Aug 2017 14:32:16 +0000
> "A. James Lewis" <james at fsck.co.uk> wrote:
>> Also, I see the following repeated in syslog:-
>> ==> syslog <==
>> Aug 21 15:25:41 hostname01 winbindd: [2017/08/21
>> 0] ../source3/libsmb/cliconnect.c:1895(cli_session_setup_spnego_send)
>> Aug 21 15:25:41 hostname01 winbindd: Kinit for
>> HOSTNAME01$@DOMAIN.LOCAL to access
>> cifs/LOCAL_AD02.domain.local at DOMAIN.LOCAL failed: Cannot contact any
>> KDC for requested realm
>> When one of the suspect users tries to log in I get:-
>> ==> auth.log <==
>> Aug 21 15:25:14 op-sdes-dsk01 su: No passwd entry for user
>> 'username' Aug 21 15:25:14 op-sdes-dsk01 su: FAILED su for
>> username by root Aug 21 15:25:14 op-sdes-dsk01 su: - ???
>> However, other AD users do work correctly.
>> This is Samba 4.5.8 BTW...
> OK, can you post the following files:
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
A. James Lewis (james at fsck.co.uk)
"Engineering does not require science. Science helps a lot but people
built perfectly good brick walls long before they knew why cement works."
More information about the samba