Quantcast
Channel: linuxadmin: Expanding Linux SysAdmin knowledge
Viewing all articles
Browse latest Browse all 17763

Samba shares with Windows users. wbinfo -u returns nothing, but -g works

$
0
0

Hey,

I'm trying to setup samba to create shares for windows users (2008R2 Domain Controller). Everything I'm doing is from a fresh install on Centos 6.7. I'm hoping to accomplish this with Samba/Winbind. The problem I'm experiencing is that if I run "wbinfo -u" I get no output. If I run "wbinfo -g" I get all my AD groups. If I "getent group" I get all my AD groups, but if I "getent passwd" I get no output. Why is this not working? Any input would be appreciated

List of samba packages installed:

  • samba-common-3.6.23-30.el6_7.x86_64
  • samba-winbind-3.6.23-30.el6_7.x86_64
  • samba-client-3.6.23-30.el6_7.x86_64
  • samba-winbind-clients-3.6.23-30.el6_7.x86_64
  • samba-3.6.23-30.el6_7.x86_64

List of Kerberose packages installed:

  • krb5-libs-1.10.3-42z1.el6_7.x86_64
  • krb5-server-1.10.3-42z1.el6_7.x86_64
  • krb5-workstation-1.10.3-42z1.el6_7.x86_64

Krb5.conf file:

[logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = MYDOMAIN.CA dns_lookup_realm = true dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable = true [realms] MYDOMAIN.CA = { kdc = dc.mydomain.ca admin_server = dc.mydomain.ca default_domain = mydomain.ca } [domain_realm] .mydomain.ca = MYDOMAIN.CA mydomain.ca = MYDOMAIN.CA [appdefaults] pam = { debug = false ticket_lifetime = 36000 forwardable = true krb4_convert = false } 

My nsswitch.conf Relevant portion:

passwd: files winbind shadow: files winbind group: files winbind 

My smb.conf global section:

 workgroup = MYDOMAIN server string = STRING netbios name = server_name log level = 3 log file = /var/log/samba/log.%U.%m max log size = 1024 security = ads passdb backend = tdbsam encrypt passwords = yes password server = * realm = MYDOMAIN.CA idmap backend = ad winbind refresh tickets = yes winbind nss info = rfc2307 winbind trusted domains only = no winbind use default domain = yes winbind enum users = yes winbind enum groups = yes vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes 

Things that work:

  • wbinfo -g
  • getent group

Things that don't work:

  • wbinfo -u
  • getent passwd

Thanks in advance.

submitted by /u/solteranis
[link] [comments]

Viewing all articles
Browse latest Browse all 17763

Trending Articles