Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [winbind]

Winbind is part of the Samba suite and provides an NSS and PAM layer for Unix/Linux systems to integrate authentication with a Windows domain

133 questions
1
vote
1 answer

saslauthd and PAM: "Too many open files" error - saslauthd restart fixes this - what is wrong?

I have a Postfix mail server running Debian Squeeze. SASL authentication for secure SMTP is supported by saslauthd which relies on pam, which relies on winbind. This pattern seems to be reoccuring every couple of weeks: Initially, there are no…
labradort
  • 1,169
  • 1
  • 8
  • 20
1
vote
2 answers

Solaris 10: winbind can't connect to Active Directory

Goal: join a Solaris 10 machine to an existing Active Directory. Steps I did: Installed software (Samba 3.4.2 from http://www.sunfreeware.com) Received a Kerberos ticket with kinit admin-user@KERB.EXAMPLE.ORG Join domain: net ads join -U…
weeheavy
  • 4,039
  • 1
  • 27
  • 41
1
vote
2 answers

Configure Winbind to get User Info from Windows

I need to configure SAMBA and Winbind on Ubuntu 10.04.1 clients to get their UID, GID, and home directory from Windows Active Directory. I have Windows Services for Unix installed with the relevant information entered in there (i.e. the UID, GID,…
Phanto
  • 851
  • 5
  • 16
  • 24
1
vote
0 answers

Samba/Winbind domain member authentication issue

In setting up a new Linux Samba fileserver as a AD member I keep running into an issue with authentication. It appears to be triggered by running with selinux in Enforcing mode after joining AD, but it doesn't go away if I turn off selinux with…
codeskipper
  • 11
  • 3
1
vote
1 answer

Ubuntu 18.04/20.04 SSSD Configuration Issues

I would like to first mention that I have more experience with the CentOS/RHEL world than I do with configuration of Ubuntu. Most of the Ubuntu systems that I have had to build use default configurations or I have been able to figure out what the…
abrousseau001
  • 11
  • 2
1
vote
1 answer

Samba extended ACLs restricting user even though they are in an authorized AD group for the share?

Have Samba extended ACLs (https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Samba_Extended_ACL_Support) via SMB+WinBind set for a CentOS 7 file server to mount shares on a Windows 10 desktop (specifically, a Citrix VDI desktop).…
lampShadesDrifter
  • 111
  • 4
1
vote
1 answer

Restarting winbind service on rhel6, service restarts but ansible fails the run

Seeing this consistently with the playbook below. - hosts: all gather_facts: no become: yes tasks: - name: restart winbind service: name: winbind state: restarted - name: reset ssh connection since winbind is dumb and…
cubezombie
  • 11
  • 1
1
vote
0 answers

winbind works but Squid acts wrong

I am trying to get a Squid Proxy running with Kerberos+Samba+Winbind, which is connected to my AD. Everything works great so far! krb auth working wbinfo -u, -a, -g working I made some new testing-groups and testing-users in the AD for testing the…
Shouma
  • 21
  • 2
1
vote
0 answers

AD group membership isn't always reflected

I have a problem regarding AD group membership not being always reflected on a Linux machine. I have joined several CentOS 7.8 machines in my AD, based on Samba and Winbind. After the join, those machines are successfully added to the domain and…
Frantz
  • 11
  • 1
1
vote
1 answer

Why does realmd list multiples of the same realm?

I'm setting up an Ubuntu server so that users can authenticate against a Windows AD server. Not knowing about realmd, I used Samba Winbind's net join command to join the machine to the domain. Afterwards, I installed realmd and tried realm…
watkipet
  • 242
  • 2
  • 3
  • 10
0
votes
1 answer

Active Directory Group Membership not reflecting correctly in linux

Background: On an isolated network. Multiple RHEL6 Linux systems connected to a Windows 2012R2 DC. Systems joined to domain and authenticating with DC. Using IDMAP_RID. No known changes to windows or linux configuration files. Everything has…
eng3
  • 157
  • 8
0
votes
1 answer

Convert Samba Active Directory to sssd instead of winbind

I've inherited a Samba 4 Active Directory (AD) server. It works fine with winbind, however for security reasons we'd like to change to sssd. The domain has two domain controllers (primary and secondary) both online. I've created a test client…
BurningKrome
  • 525
  • 2
  • 8
  • 21
0
votes
1 answer

Winbind rfc2307 shell not honored after Samba 4 upgrade

I have CentOS 7 servers with samba-winbind talking to an AD. We use rfc2307 to override the default shell for certain (power) users. One such server is still running an older version of samba-winbind, v.4.4.4-14.el7_3; this works as expected. From…
Thomas J. Girsch
  • 51
  • 1
  • 6
0
votes
0 answers

Samba for Debian Stretch keeps asking for password

so I've got the dreaded 'samba keeps asking for password' issue in Debian Stretch. My environment: 2x AD DCs running WS2012R2 A few physical computers and several VMs running on ESXi 6.7 All machines can log into domain and access domain…
AveryFreeman
  • 279
  • 1
  • 3
  • 12
0
votes
0 answers

Unable to log in as root or domain user

Solved - See Update 2 below. We have a Debian Jessie DNS / SSH server. I have joined it to our AD domain by following this guide and created a cron job to sync the time with a domain controller using ntp. Additionally, I have put the AD group…
hanspeteriv
  • 31
  • 6
1 2 3
…
8 9