[K12OSN] samba-winbind-ads setup

[Dimitri Yioulos]

Henry,

Thanks, and my real bad for posting before I exhausted all my possibilities.

I took the how-to suggested by John Simovic, and applied it word-for-word -
didn't work.  But, moving through the various samba-winbind-ads-related
files, I made changes (e.g. used IP address of DC in smb.conf and krb5.conf
instead of FQDN; used idmap uid = 16777216-33554431 and idmap gid =
16777216-33554431 [this was the original setup default] rather than idmap
uid = 10000-20000 and idmap gid = 10000-20000 in smb.conf) and ... it works!
I will cautiously try this setup on a "production test" machine as opposed
to my "test test" machine, although this next one will CentOS (RHEL AS 3).

And I will add your line to my rc.local.

I feel a bit like the boy who cried (not wolf, just cried), and hope I
didn't use up all of my goodwill.

Many thanks to you and John.

Regards,

Diggy 

-----Original Message-----
From: k12osn-bounces at redhat.com [mailto:k12osn-bounces at redhat.com] On Behalf
Of Burroughs, Henry
Sent: Wednesday, September 22, 2004 3:55 PM
To: Support list for opensource software in schools.
Subject: RE: {Spam?} RE: [K12OSN] samba-winbind-ads setup

Diggy,

Check /etc/nsswitch.conf and make sure winbind is listed on the lines for

passwd, shadow, & group.

Henry

-----Original Message-----
From:	Dimitri Yioulos [mailto:dyioulos at firstbhph.com]
Sent:	Wed 9/22/2004 1:43 PM
To:	'Support list for opensource software in schools.'
Cc:	
Subject:	RE: {Spam?} RE: [K12OSN] samba-winbind-ads setup


-----Original Message-----
From: k12osn-bounces at redhat.com [mailto:k12osn-bounces at redhat.com] On Behalf
Of Dimitri Yioulos
Sent: Wednesday, September 22, 2004 10:59 AM
To: 'Support list for opensource software in schools.'
Subject: {Spam?} RE: [K12OSN] samba-winbind-ads setup

-----Original Message-----
From: k12osn-bounces at redhat.com [mailto:k12osn-bounces at redhat.com] On Behalf
Of John Simovic
Sent: Thursday, September 16, 2004 1:47 AM
To: 'Support list for opensource software in schools.'
Subject: RE: [K12OSN] samba-winbind-ads setup

Go to http://www.wlug.org.nz/ActiveDirectorySamba for an excellent
howto. Worked perfect for me

Trying to move ahead with my samba-winbind-ads setup, I followed the
directions in the how-to suggested by John to the letter.  I checked and
rechecked everything to make sure all was right.  I found that "net ads
join" only worked if I added the "S" switch.  Without it, I'd get the error
"ads_connect: Transport endpoint is not connected".  Doing a "wbinfo -u"
returns "Error looking up domain users".  What the ... am I doing wrong?

Diggy


Never mind.  I found that when I substituted the IP address of the DC in
both smb.conf and krb5.conf, it worked.  At least as for as "wbinfo -u" and
"wbinfo -g" returning expected results.  However, getent passwd does not
return the expected results.  Any idea as to why this is?

Diggy