Web lists-archives.com

Re: [Samba] wbinfo -i returns the same id for all users, authentication doesn't seem to go through winbind at all




Le Mon, 20 Feb 2017 14:01:08 +0000
Rowland Penny via samba <samba@xxxxxxxxxxxxxxx> écrivait:

> On Mon, 20 Feb 2017 14:44:36 +0100
> Emmanuel Florac <eflorac@xxxxxxxxxxxxxx> wrote:
> 
> > Le Sat, 18 Feb 2017 20:17:12 +0000
> > Rowland Penny via samba <samba@xxxxxxxxxxxxxxx> écrivait:
> >   
> > > Only change I made before installing Samba, was to comment the
> > > '127.0.1.1' line in /etc/hosts  
> > 
> > Tried again with your smb.conf and minimal changes, and it gets
> > worse: 
> 
> OK, I set up Debian Jessie in a VM and then installed and configured
> Samba and it worked, this all took just about an hour.
> 
> I suggest you check your settings against the ones I posted.
> 

Hi Rowland, sorry to be back again.

I've set up a new test Win2012R2 AD server from scratch.
I've set up a Debian VM from scratch.
I've installed exactly the settings you sent (except for the AD name,
to reproduce the production configuration).

It doesn't work. Exactly the same problem. I can connect to the share
as Administrator because the users.map file maps Administrator to local
root (files created by Adminsitrator are owned by root) but *no other
user account* works unless I declare the share public, so that all
accounts are mapped to nobody.

"getent passwd testuser" returns nothing (return code is 2).

root@debadclient1:~# wbinfo -i bidon
bidon:*:11106:10513:bidon bidon:/home/TESTAD/bidon:/bin/bash
root@debadclient1:~# getent passwd bidon
root@debadclient1:~# echo $?
2

I'm getting desperate. 

I tried using a Debian 9/ samba 4.5.4. Exactly the same. At least the
behaviour is consistent...

-- 
------------------------------------------------------------------------
Emmanuel Florac     |   Direction technique
                    |   Intellique
                    |	<eflorac@xxxxxxxxxxxxxx>
                    |   +33 1 78 94 84 02
------------------------------------------------------------------------

Attachment: pgpQze96OmRos.pgp
Description: Signature digitale OpenPGP

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba