Winbind is part of the Samba suite and provides an NSS and PAM layer for Unix/Linux systems to integrate authentication with a Windows domain
Questions tagged [winbind]
133 questions
2
votes
2 answers
getent groups shows AD groups, but getent passwd doesn't show users
Attempting to get my fedora linux machine to allow Active Directory logons, but I'm not aple to get past this. I'm trying to reconcile a number of tutorials which seem to give contradictory advice as to a few things, such as setting + or / as…
![](../../users/profiles/2329.webp)
Peter Turner
- 2,048
- 9
- 33
- 45
2
votes
7 answers
Ubuntu + AD; Failed to join domain: failed to set machine spn: Constraint violation
I'm attempting to join a Ubuntu 12.04 server to Active Directory. I installed samba, and kb5-user, created a machine account in AD, and did:
> net ads testjoin
Join is OK
So far so good. Then I hit a problem:
> sudo net join -U myuser
Failed to…
![](../../users/profiles/74300.webp)
Jon Skarpeteig
- 941
- 2
- 14
- 28
2
votes
1 answer
Bringing Linux Accounts in Active Directory
I'm trying to centralize user login information via Active Directory. Currently I have AD running on Server 2008 R2. I do have Identity Management for UNIX installed on it. I also have a few Linux clients mainly using CentOS 5.X and Fedora 14. I've…
![](../../users/profiles/110258.webp)
user1013264
- 29
- 2
2
votes
1 answer
CentOS 6 Gnome login immediately logs me out
Have a strange issue on freshly installed CentOS 6, with Samba Windows 2008 R2 authentication.
The login succeeds, and even the home directory created, but then I'm thrown back to the login scren again. The message log contain the following…
![](../../users/profiles/13323.webp)
SyRenity
- 3,159
- 11
- 55
- 79
2
votes
2 answers
Windows Share authentication from Active Directory Linux login
I'm using Active Directory to log into RHEL. To do this, I followed the steps outlined here:
http://www.markwilson.co.uk/blog/2007/05/using-active-directory-to-authenticate-users-on-a-linux-computer.htm
I'd like to be able to read data from…
![](../../users/profiles/36720.webp)
Kenny
- 520
- 1
- 8
- 24
2
votes
2 answers
I have to manually restart winbind.service after every reboot. Ubuntu 18.04
S.O. Ubuntu 18.04.4, Samba version 4.7.6-Ubuntu
I have this problem with this machine. Whenever the system restarts, winbind.service fail to start properly, and error "clock skew too great" is recorded in logs.
winbind log:
[2020/02/17…
![](../../users/profiles/239442.webp)
giorgiline
- 121
- 1
- 6
1
vote
1 answer
Should domain_realm point to a domain controller or KDC, or is it just the default_realm name?
In /etc/krb5.conf, given the folowing default_realm, should [realms].default_domain point at the default_realm or a Domain Controller (DC) or Key Distribution Denter (KDC)?
ada and adb are Windows Server DCs & KDCs. The domain members are systems…
![](../../users/profiles/52734.webp)
Louis Waweru
- 695
- 9
- 26
1
vote
0 answers
Samba: authenticate against Active Directory using winbind but authorize against separate OpenLDAP server
Short Version
How can I configure a CentOS 7 machine with Samba 4.8.0 serving users on Windows 7 clients to authenticate using their domain login credentials (winbindd and Active Directory) but be authorized (i.e. perform user/group lookup) against…
![](../../users/profiles/217484.webp)
rg6
- 185
- 1
- 11
1
vote
1 answer
FreeRADIUS can not login with Active Directory user
I install freeradius 3 in debian 9. I can login with user from text file in radius but I want to login with user from Active Directory.
First, I install this library.
apt install samba winbind krb5-user krb5-config -y
Then I config realm like…
![](../../users/profiles/524846.webp)
user58519
- 111
- 2
1
vote
0 answers
Make winbind rfc2307 optional
Back in the samba-winbind 4.4 days, you could set a default template shell and template directory for AD users, but override these defaults by using rfc2307. This was useful because we could allow ordinary users to access databases with their domain…
![](../../users/profiles/451412.webp)
Thomas J. Girsch
- 51
- 1
- 6
1
vote
1 answer
Samba File Server shows already deleted users as directory owner / winbind name resolution
I have on a Samba File Server (openSUSE Leap 15), a directory with subdirectorys in which some should have no more owner. User Name Resolution is going by winbind. I want to delete every dir with no owner.
The Problem is, that ls -la shows me, that…
![](../../users/profiles/479601.webp)
MHABK
- 9
- 5
1
vote
0 answers
Samba4 in AD Domain: getent shows only local accounts
I had my samba domain member working a few days ago, but now it stopped serving domain users. Some of the steps I already tried: clear caches, rejoin domain, reboot, pam-auth-update, with and without "winbind use default domain = yes" and some…
![](../../users/profiles/466829.webp)
grasp
- 11
- 5
1
vote
1 answer
Moving from LDAP to LDAPS - Ubuntu 14.04 Winbind, Samba
I have an Ubuntu 14.04 AD DS member server which appears to be binding to AD no problem with the following command:
wbinfo -g
I want to move to using LDAPS now. I configured LDAPS on my 2012 R2 DC and can bind over LDAPS using ldp.exe.
What steps…
user402916
1
vote
4 answers
Samba 4: domain joined, but all users are mapped to nobody, and shares are inaccessible from Windows clients
I've got a Debian/Jessie Samba 4.2.14 running as an AD member. ADC is a Windows2008R2 server. Join worked without problem.
# net ads testjoin
Join is OK
wbinfo -u and wbinfo -g work perfectly and provides a list of users and groups from the AD as…
![](../../users/profiles/10310.webp)
wazoox
- 6,782
- 4
- 30
- 62
1
vote
0 answers
Samba Winbind fail to lookup "domain users" group
Debian samba server authenticated with active directory
"# id username" is able to lookup all group id but just "domain users" is missing intermittently, result in (servername\none)
# id test.user
uid=16793(test.user) gid=10513(servername\none)…
![](../../users/profiles/318420.webp)
salvation3103
- 13
- 3