[Samba] Winbind error "Could not fetch our SID - did we join?"

[Rowland Penny]

On Mon, 13 Nov 2017 12:05:33 +0100
Sven Schwedas <sven.schwedas at tao.at> wrote:

> /etc/hostname:villach-file
> /etc/hosts:# The following lines are desirable for IPv6 capable hosts
> /etc/hosts:::1     localhost ip6-localhost ip6-loopback
> /etc/hosts:ff02::1 ip6-allnodes
> /etc/hosts:ff02::2 ip6-allrouters
> /etc/hosts:127.0.0.1  localhost
> /etc/hosts:192.168.16.214 villach-file

I would change the above line to:

192.168.16.214 villach-file.ad.tao.at villach-file

> /etc/krb5.conf:[libdefaults]
> /etc/krb5.conf:	default_realm = AD.TAO.AT
> /etc/krb5.conf:	dns_lookup_realm = true
> /etc/krb5.conf:	dns_lookup_kdc = true
> /etc/krb5.conf:	default_keytab_name = FILE:/etc/krb5.keytab
> /etc/krb5.conf:[domain_realm]
> /etc/krb5.conf:	.ad.tao.at = AD.TAO.AT
> /etc/krb5.conf:	ad.tao.at = AD.TAO.AT
> /etc/krb5.conf:	.tao.at = AD.TAO.AT
> /etc/krb5.conf:	tao.at = AD.TAO.AT

/etc/krb5.conf only needs to contain this:

[libdefaults]
    default_realm = AD.TAO.AT
    dns_lookup_realm = false
    dns_lookup_kdc = true

> /etc/resolv.conf:nameserver 192.168.16.1
> /etc/resolv.conf:domain ad.tao.at
> 

I would change 'domain ad.tao.at' to 'search ad.tao.at'

Rowland