Re: [LUG] ADS integration with winbindd

["Kevin Tunison" <ktunison@xxxxxxxxx>]

Howdy,

I 'sort of' have working what you want, BUT I have kerberos setup on the kit.  How come you don't want to set up kerberos?

Have you renamed the machine and rejoined (and reset the machine account on the AD setup)?

The purpose of my linux box (Mandriva 2006) was for squid proxy/dans filtering (I have two instances running for squid).

Two links I used are:

http://tlug.dnho.net/?q=node/174#comment-210
http://lists.centos.org/pipermail/centos/2005-April/004600.html

Here's the samba config (it's not but a few lines, if you want to see
the winbind.conf let me know and I'll mail that privately)  I'm
using - samba version 3.0.20.  I don't know what the latest
package for sarge is, but anything less will have an older
winbind  (http://us3.samba.org/samba/history/samba-3.0.20.html)

# Samba config file created using SWAT 
# from 127.0.0.1 (127.0.0.1)
# Date: 2006/01/13 14:22:04

[global]
workgroup = EATATJOES
server string = Samba Server %v
#    security = DOMAIN
security = ads
realm = EATATJOES.LOCAL
username map = /etc/samba/smbusers
password server = GASTAPO.EATATJOES.LOCAL
log level = 2
log file = /var/log/samba/log.%m
max log size = 50
deadtime = 15
socket options = SO_KEEPALIVE TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
disable spoolss = Yes
show add printer wizard = No
preferred master = No
local master = No
domain master = No
dns proxy = No
ldap ssl = no
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind use default domain = Yes
invalid users = root
hosts allow = 192.168.0.

[Whatever My Share Is]
path = /home/bingo
read >
create mask = 0664
directory mask = 0775
browseable = No

On 5/4/06, Simon Waters <simon@xxxxxxxxxxxxxx> wrote:

I'm trying to do the setup without Kerberos in Debian Sarge.

If someone has this working, can they share the contents of /etc/samba
with me please.... and any notes they have.

Currently;

winbind errors "idmap uid range missing or invalid" (when I'm sure it
isn't - at least not where I've specified it).

I can't get wbinfo -u to work, it "Error Looking up domain users".

The results look to me like the software is just bust -- but maybe there
is something basic I'm missing.

  Simon

PS: Don't ever give another machine the same name as one of your IIS
servers by mistake.... that would be very silly and would take a
disproportionate amount of effort to put right :(

-
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe. FAQ: www.dcglug.org.uk/linux_adm/list-faq.html