AW: Winbind 3.6 keine Übernahme von Active Directory User & Gruppen

12/12/2013 - 10:50 von Alexander W. | Report spam
| #== Global Settings =| [global]
| workgroup = CARD
| realm = card.de
| netbios name = NAS2
| security = ADS
| # idmap config * : backend = rid
| # idmap config * : range = 10000-20000
| # idmap config CARD : backend = rid
| # idmap config CARD : range = 10000-20000
| # idmap config CARD : base_rid = 0
| idmap uid = 10000-20000
| idmap gid = 10000-20000
| template shell = /bin/bash
| winbind use default domain = yes
| winbind enum users = yes
| winbind enum groups = yes
| # winbind separator = +
| domain master = no
| local master = no
| preferred master = no
| server string = %h server
| include = /etc/samba/dhcp.conf
| dns proxy = no
| log level = 0
| syslog = 0
| log file = /var/log/samba/log.%m

Hallo Steffen,

kommentiere die idmap config Parameter aus und probiere als Backend
tdb also:

#== Global Settings =idmap config * : backend = tdb
idmap config * : range = 10000-20000
idmap config CARD : backend = tdb
idmap config CARD : range = 10000-20000
idmap config CARD : base_rid = 0

Ansonsten würde ich den 'log level' erhöhen und mir die
/var/log/samba/log.winbindd-idmap ansehen.

Gruß,
Alex







Zum AUSTRAGEN schicken Sie eine Mail an debian-user-german-REQUEST@lists.debian.org
mit dem Subject "unsubscribe". Probleme? Mail an listmaster@lists.debian.org (engl)
Archive: http://lists.debian.org/ccc32a9c91b...a.squirrel@yaris.dyndns.org
 

Lesen sie die antworten

#1 Langenbach, Steffen
12/12/2013 - 12:00 | Warnen spam
Hi Alex,

hab die Änderungen an der smb.conf gemacht. Der Teil sieht jetzt so aus:
idmap config * : backend = tdp
idmap config * : range = 10000-20000
idmap config CARD : backend = tdp
idmap config CARD : range = 10000-20000
idmap config CARD : base_rid = 0
# idmap uid = 10000-20000
# idmap gid = 10000-20000

Dann:
/etc/init.d/winbind stop
/etc/init.d/samba restart
/etc/init.d/winbind start

Hat sich allerdings nichts geàndert :/ Bekomme immer noch keine AD-Gruppen angezeigt
Ich hab das loglevel mal hochgesetzt auf "log level = 10"

In der die /var/log/samba/log.winbindd-idmap tut sich nichts (steht auch überhaupt nichts drin):
-rw-r--r-- 1 root root 0 6. Dez 12:53 log.winbindd-idmap

Die /var/log/samba/log.winbind hat dafür umso mehr:

[2013/12/12 11:39:31, 0] winbindd/winbindd.c:1346(main)
winbindd version 3.6.6 started.
Copyright Andrew Tridgell and the Samba Team 1992-2011
[2013/12/12 11:39:31, 5] ../lib/util/debug.c:330(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
doing parameter syslog = 0
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter syslog only = yes
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter encrypt passwords = true
doing parameter passdb backend = tdbsam
doing parameter obey pam restrictions = yes
doing parameter unix password sync = no
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n *Retype\snew\s*\spassword:* %n *password\supdate
doing parameter pam password change = yes
doing parameter socket options = TCP_NODELAY IPTOS_LOWDELAY
doing parameter guest account = nobody
doing parameter load printers = no
doing parameter disable spoolss = yes
doing parameter printing = bsd
doing parameter printcap name = /dev/null
doing parameter unix extensions = yes
doing parameter wide links = no
doing parameter create mask = 0777
doing parameter directory mask = 0777
doing parameter use sendfile = yes
doing parameter aio read size = 16384
doing parameter aio write size = 16384
doing parameter null passwords = no
[2013/12/12 11:39:31, 1] param/loadparm.c:7992(lp_do_parameter)
WARNING: The "null passwords" option is deprecated
doing parameter local master = yes
doing parameter time server = no
doing parameter wins support = no
[2013/12/12 11:39:31, 4] param/loadparm.c:9608(lp_load_ex)
pm_process() returned Yes
[2013/12/12 11:39:31, 7] param/loadparm.c:9834(lp_servicenumber)
lp_servicenumber: couldn't find homes
[2013/12/12 11:39:31, 10] param/loadparm_server_role.c:101(set_server_role)
set_server_role: role = ROLE_DOMAIN_MEMBER
[2013/12/12 11:39:31, 5] ../lib/util/charset/codepoints.c:235(map_locale)
Substituting charset 'UTF-8' for LOCALE
[2013/12/12 11:39:31, 3] lib/fault.c:318(dump_core_setup)
Maximum core file size limits now 16777216(soft) -1(hard)
[2013/12/12 11:39:31, 2] lib/tallocmsg.c:124(register_msg_pool_usage)
Registered MSG_REQ_POOL_USAGE
[2013/12/12 11:39:31, 2] lib/dmallocmsg.c:78(register_dmalloc_msgs)
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED

Viele Grüße,
Steffen

Von: Alexander W. [mailto:]
Gesendet: Donnerstag, 12. Dezember 2013 10:46
An:
Betreff: AW: Winbind 3.6 keine Übernahme von Active Directory User & Gruppen

| #== Global Settings =| [global] workgroup = CARD realm = card.de netbios name = NAS2 security
| = ADS # idmap config * : backend = rid # idmap config * : range | 10000-20000 # idmap config CARD : backend = rid # idmap config CARD :
| range = 10000-20000 # idmap config CARD : base_rid = 0 idmap uid | 10000-20000 idmap gid = 10000-20000 template shell = /bin/bash winbind
| use default domain = yes winbind enum users = yes winbind enum groups
| = yes # winbind separator = + domain master = no local master = no
| preferred master = no server string = %h server include | /etc/samba/dhcp.conf dns proxy = no log level = 0 syslog = 0 log file
| = /var/log/samba/log.%m

Hallo Steffen,

kommentiere die idmap config Parameter aus und probiere als Backend tdb also:

#== Global Settings == idmap config * : backend = tdb idmap config * : range = 10000-20000 idmap config CARD : backend = tdb idmap config CARD : range = 10000-20000 idmap config CARD : base_rid = 0

Ansonsten würde ich den 'log level' erhöhen und mir die /var/log/samba/log.winbindd-idmap ansehen.

Gruß,
Alex







Zum AUSTRAGEN schicken Sie eine Mail an
mit dem Subject "unsubscribe". Probleme? Mail an (engl)
Archive: http://lists.debian.org/


Zum AUSTRAGEN schicken Sie eine Mail an
mit dem Subject "unsubscribe". Probleme? Mail an (engl)
Archive: http://lists.debian.org/

Ähnliche fragen