I have a samba server I had manually configured pam to use winbind in 8.04 I'm pretty sure that when I did that I broke pam. I had not choice at the time but in 10.04 there is a winbind pam module.How can I rewrite the pam configuration to use the default pam winbind configuration?
View 1 RepliesI just upgraded my Ubuntu V10.4 LTS to Ubuntu 11. After that, I lost my external monitor and I cannot find those usual "preferences", "Administration" navigational menus on top of the screen.
Stumbled into Multiple Monitors under System, but it didn't detect the second monitor. However, the 2nd monitor was active and with system startup messages displayed there during reboot. But as soon as the desktop appear, that 2nd monitor lost its signal.
I need a video driver for SIS M760GX for an ACER Aspire 5000 laptop.
Everywhere I've looked it says to run
sudo dpkg-reconfigure xserver-xorg
Supposedly, this is supposed to open a window where I can change settings. However it does nothing and just returns me to the prompt.
i had a dualboot configuration of win7 ubuntu 10 on separate partitions no wubi.my windows system is encrypted so i had truecrypts password prompt then an easybcd selection for windows and ubuntu.i have got a back up of the truecrypts bootloader "last bootloader" no file extention.but how can i reconfigure the system since after upgrading i can only boot in ubuntu.what software should i use.
View 2 Replies View RelatedHave recently setup Samba on a fresh install of Fedora 14 so that I can use it as a workstation in a Windows 2003 (win2k3) domain.
The install of Samba seems to have worked as I can connect to the Domain using ADS and kerberos. selinux and firewall have been disabled until I have it working 100%
The problem lies when i try to login to Gnome or TTY. It begins to create the home directory for the domain user logging in but after a certain process Fedora logs the user out of the system.
Have looked through several log files (/var/log/messages, log.winbindd, log.winbindd-dc-connect) but am unable to debug it any further.
Have posted the config files below which shows the Fedora machine is successfully connected to the domain as it lists its groups, users and validates logon credentials - it just won't logon!
Where i can go about debugging. Also if you need additional configs.
I did the following command while I had my partition mounted and was not able to restart until i pulled the power. sudo dpkg-reconfigure linux-image-2.6.32-21-generic. Everything seems to be working okay now but before I start getting into 10.04 i wanna make sure i just didn't screw anything up.
View 3 Replies View RelatedHow do I reconfigure grub when adding a disk to a machine where both disks have their own MBRs? I have two volumes:Disk 1 - actually mirrored RAID-1 drives managed by ICH9R on the motherboard Disk 2 - a single drive managed by ICH9R on the motherboard, but without RAID. Disk 1 is the "old" disk containing WinXP on the first partition. The MBR of Disk 1 was created by Windows. Disk 2 was built on the machine while Disk1 was unplugged. Disk2 has Win7 on /dev/sda1 and Fedora 12 on /dev/sda7. Obviously, Disk 2 has grub installed on its own MBR.
When I plug-in both Disk 1 and Disk 2 at the same time, I would like to reconfigure grub so that it gives me the option to switch between WinXP on Disk 1, Fedora on Disk 2 and Win7 on Disk 2. (I may also want to install Ubuntu on another partition of Disk 1, but that's a separate issue.) The problem is that when I plug in Disk 1, Disk 1 becomes /dev/dm-0 and Disk 2 becomes /dev/sdc (instead of /dev/sda as when I installed it). (I don't think I can switch this order because I'm worried that Windows will become confused.) So, how do I keep all partitions the same and get them all to work from grub? On which MBR will I need to install grub? How do I configure it to see all 3-4 of my operating systems? Do I fix grub from the Fedora LiveCD?
for some reason the package winbind is misbehaving. A few upgrades ago I suddenly started getting this error message each time I try to upgrade or install winbind (or any other package).
Code:
john@john-desktop:~$ sudo apt-get upgrade
[sudo] password for johnny:
Reading package lists... Done
[Code]...
There are several DCs on our network, and winbind seems to use a win2008 one (found by wins maybe?), with which it has an incompatibility issue.
Can I specify somehow the ip address of the AD which winbind is allowed to use?
I have set "password server=<dc ip>" in smb.conf and it works now. I suspected that should be the right option to set, but the samba manual stating that option only takes effect with "security=ad" had misinformed me. Actually, it also takes effect with "security=domain".
we are using LucidLynx Linux, 64-bit,with ActiveDirectory accounts via samba/winbind 64-bit.I have 2 separate 32-bit applications:IBM MQ Toolkit (32-bit java-based) and Acrobat Reader
View 2 Replies View RelatedI have an SSH server on my laptop, and I'm using the default configuration file, but I added "AllowUsers <myUserName>". I get lots of login attempts like the ones below in my /var/log/auth.log.From Google, I find that pam_winbind allows some kind of Windows authentication. This leaves me with 2 questions. What does winbind do when I have not configured any Windows/Samba accounts? How can I turn it off?
Code:
Oct 23 20:01:49 muon sshd[24329]: User root from 201.116.17.163 not allowed because not listed in AllowUsers
[code]...
I am trying to get a ubuntu machine (client) onto a windows active directory (domain) this i have done and you can login using winbind to the client desktop no problems however i dont want the domain users' home directories on the client machine so i have set up a ubuntu server (samba) to hold the home directories now so far i have been able to set up a share which both windows and linux can read and write to with no passwords needed, and if i have modified the /etc/fstab file on the client to mount the samba share on startup however if i login as a domain user it fails to create a home directory on the share with the following error:
"/mnt/home/admin2" does not exist
now the main question is this in fstab i have used a cred file stored in /usr/share/.smbcred which should be accessible by all users right? i know i can put the creds into the fstab file but i can't find how and it is just failing to mount when i try so if you know how i will try that, also does fstab run before or after the home directory is created as if it runs after then the cred file is working but the home directory is looking at a location which hasnt been mounted yet or if fstab runs before then the location is not mounting right (hoping for second one )
[Client]
Ubuntu 10.04 desktop
[Samba Server]
Ubuntu 8.04 LTS Server
[Windows Active Directory]
Windows server 2003
I have a NAS which I've re-installed with DEBAIN. Mostly its all working great but when I tell it to ping a NetBIOS name it takes 10 seconds per attempt rather than 1. Despite this it actually resolves the NetBIOS names very quickly (the first line from the ping including the IP address appears almost instantly) it just sits there for 10 secs every ping.
# ping -c3 qnap
PING qnap (192.168.1.100) 56(84) bytes of data.
64 bytes from 192.168.1.100: icmp_seq=1 ttl=64 time=0.175 ms
64 bytes from 192.168.1.100: icmp_seq=2 ttl=64 time=0.167 ms
64 bytes from 192.168.1.100: icmp_seq=3 ttl=64 time=0.158 ms
--- qnap ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 20036ms
rtt min/avg/max/mdev = 0.158/0.166/0.175/0.016 ms
#
# ping -c 3 [URL]
PING www.l.google.com (173.194.36.104) 56(84) bytes of data.
64 bytes from lhr14s01-in-f104.1e100.net (173.194.36.104): icmp_seq=1 ttl=49 time=40.3 ms
64 bytes from lhr14s01-in-f104.1e100.net (173.194.36.104): icmp_seq=2 ttl=49 time=25.4 ms
64 bytes from lhr14s01-in-f104.1e100.net (173.194.36.104): icmp_seq=3 ttl=49 time=25.7 ms
--- www.l.google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2022ms
rtt min/avg/max/mdev = 25.491/30.518/40.313/6.926 ms
I'm really struggling to track down what may be causing this as it is strictly when resolving NetBIOS names yet it finds the IP immediately.
I have a few Redhat 8 servers that I have shut the winbind service off, yet I see lots of message int he /var/log/messages log in regards to winbind. The message i am seeing are
pam_winbind[25640]: write to socket failed!
pam_winbind[25640]: internal module error (retval = 3, us
er = `root'
There is a lot of these messages in the log.
i tryed this [URL]
now i cant reconfigure the drives. the first and 3rd thumbnail appears from that tutorial..
miss the 2nd thumbnail
and cant unmount a any drive
itryed uninstall the software and reinstall it. nothing happens every time i boot all drives mounted automaticaly
After adding the box to the domain I restart the box, since then the Winbind service stops working and I 'm not able to start it.
when I do Service Winbind Start it tells me FAILED .
What would cause the Winbind service to stop working?
When I put sudo dpkg-reconfigure xserver-xorg into terminal then hit the return key it asks for my password which I put in, it then seems to do nothing it doesn't open the xserver page to make any changes.
View 9 Replies View RelatedI need to know the codes to reconfigure my graphics. While updating from v9.10, the graphics got misconfigured somehow.
View 1 Replies View RelatedIn short we are booting Centos 5.4 over PXE to a bunch of diskless clients. Once they are booted - we can login (as local root account) and RDP to windows machines using rdesktop as we require.
The next step of the project is to get user authentication to the Windows Domain controller working for the PXE image.
To do so - we continued with our physical install of Centos 5.4 (used to create the pxe image with rsync as per the wiki page for diskless clients) by following through this page. AD auth works perfect on this box (it has a local HDD install of centos obviously).
Once we rsync'd the changes over to the pxeboot location - and rebooted one of the diskless pxe clients - we get issues.
The issue is that winbind seems to start - however the file "/etc/samba/secrets.tdb" cant be read. We tried removing this file that the PXE clients use and recreating it using
touch /etc/samba/secrets.tdb
How do I turn winbind authentication off or vsftpd. I keep getting these error messages in the /var/log/ secure:vsftpd: pam_winbind(vsftpd:auth): request failed: No such user, PAM error was User not known to the underlying authentication module (10), NT error was NT_STATUS_NO_SUCH_USER.I already tried remarking out different things in the config files. Is it safe to remark out the winbind stuff in /etc/pam.d/system-auth if we are using the smbclient to connect to a Windows share?Why would you want to to use AD to authenticate users for something simple like FTP is beyond me.I merely want it to authenticate against local system users.
View 3 Replies View RelatedIntent is to use samba+winbind to authenticate Ubuntu desktop against a Windows 2008 R2 domain (seems like I was able to get it working temporarily but it stopped working after some time). Quick overview of the issue: winbind is failing to lookup group ID's for a domain user causing the domain user to receive group errors on login and an inability to use domain groups in other configuration (sudoers, etc)
- Very basic install, boot to Ubuntu Desktop 10.04 LTS 64bit install, basic install options, perform software updates
- Following an Ubuntu AD HowTo [URL]
- Install kerberos, samba, winbind packages
- Make changes to krb5.conf, smb.conf, files in pam.d/ (to make the home directory and restrict login based on group membership, which works even in the half-working state but requires SID instead of text name)
After a reboot I can login as a domain account but I get the following error(s):
groups: cannot find name for group ID #####
##### is usually a number that ranges from 10000 to 10020, based on the smb.conf line regarding idmap I will get multiple group errors (one for each group that the user belongs to that winbind can't lookup for whatever reason, some groups can be resolved - see below) If I log-out and then log-in as a local user I can run the following command: id username The output returns something similar to the following:
uid=10002(username) gid=10003(domain users) groups=10003(domain users),10033,10032,10031,10030,10029,10028,10027,1 0026,10025,10024,10023,10022,10021(some group),10020,10019,10018(some other group),10017,10016,10015,10014,10013,10012,10011(s ome other other group),10010,10009,10008,10007
On a working system (Ubuntu 10.10 and when 10.04 decides to work) each group is followed by parenthesis' and the name of the group, this result clearly shows that some groups can be looked up but for some reason other groups are failing An output of /var/log/samba/log.winbind produces the following entries (that are logged when you run the id command)
[2011/08/03 19:04:39, 1] winbindd/winbindd_ads.c:1137(lookup_groupmem)
lsa_lookupsids call failed with NT_STATUS_PIPE_BROKEN - retrying...
[2011/08/03 19:04:39, 1] winbindd/winbindd_ads.c:1137(lookup_groupmem)
lsa_lookupsids call failed with NT_STATUS_PIPE_BROKEN - retrying...
The above repeats for what looks to be each group that fails (based on count of entries)If I use wbinfo I can resolve text group name to SID and SID to GID
wbinfo -n groupname (returns proper SID)
wbinfo -s SID (returns proper text group name)
wbinfo -Y SID (returns proper linux mapped group ID)
Following that process for a group that my user belongs to that is not resolving (via the id username command) will return the group ID (GID) properly (even though id username fails to lookup info for that same GID) Version Information:
uname -a
Linux hostname 2.6.32-33-generic #71-Ubuntu SMP Wed Jul 20 17:27:30 UTC 2011 x86_64 GNU/Linux
lsb_release -a
No LSB modules are available.
[code]....
I recently attempted to change my ip with terminal using "ifconfig etho <input address>" but failed to annotate the previous address. I restarted the network after appending the network document at "/etc/network/interfaces" and restarted the network "/etc/init.d/network restart". Checking through I found the the IP address was what I changed it too yet the problem was attempting to revert it back.Going through a cycle of editing the network document and restart the network has ended in failure and I am curious if there is a way to reset the configuration for eth0 without reinstallation.
View 5 Replies View Relatedi'm newbie here.when i try to use gd in my web application,it says that i didn't install gd support.howto install php gd support to my existing php installation? i use php 5.2.9 for slackware.
Code:
PHP Version 5.2.9
System :Linux jbendkck1 2.6.29.6-smp #2 SMP Mon Aug 17 00:52:54 CDT 2009 i686
[code]...
I added my linux server to a windows AD using winbind / samba. Everything worked just fine. After changing the OS to Debian lenny x64 I get a "segmentation fault" when trying to change user passwords. I am using the exact same configuration, on my 32 bit Server everything works.
debian:~# passwd <user>
sgmentation fault
tail /var/log/syslog:
kernel: [689689.005934] passwd[11209]: segfault at 0 ip b7b84418 sp bfc37fc0 error 4 in pam_winbind.so[b7b7e000+b000]
Debian Lenny 5.0
[Code].....
I'm running a squid server on debian lenny with ntlm_auth.
Everything is working good after following those two tutorials : [url] and [url]
As all was working perfectly i decided to rebbot my server, and after reboot the ntlm-auth was not working anymore.
When i tried to run the command "wbinfo" with many options i had this error message "error looking up domain users" or"error looking up domain group" so i think that the problem deals with winbind module.
I know that proxy user needs rights and that after reboot the rights are reseted, so this problem doesn't come from here.
And when i try to open IE with a client i have this "cache accesss denied" because the ntlm_auth wasn't done.
I tried to restart all services (samba,winbind,squid) without any success, only the "kinit" command is still working...
What is going on with winbind when the server is rebooted ?
I have a Samba File Server that can authenticate users in my Windows AD to log into the server. Anyways, I have a good amount of Windows Admins on staff but our org wants to cut budget so our first "slash" as it were is cutting down the actual Windows based File Servers.So my question is, now that I have this test server up and authenticating for logins using Windbind....is there a way I can get system-config-samba to "see" winbind users and groups so that file servers can still be "point and click" for my Windows Admins?
View 3 Replies View RelatedCentos 5.4 64bit fully updated. What I am doing is vsftpd is setup and nfs shares are mounted to a NAS server which is running openfiler 2.3 fully updated. openfiler is winbind to AD and pulling users and groups over.
I have it confirmed working when a ftp users connects the username/password is authenticated against AD which works. User can login and is directed to the users folder on the nfs share.
Openfiler shows me UID and GID numbers for users and groups, centos also shows me UID and GID but they are different which is causing permissions/quota's to not work right.
Both servers are setup with krb and winbind, openfiler has a more recent version of winbind.
Here is an example...
AD Users are
user UID of 160010 as an example
user1 UID 160011
When user logs into the vsftp server it works and chrooted into the directory for that user. When user uploads files I can upload but the UID in the ftp client shows 1600011 which is user1 UID
logging into windows to that share shows in the security tab that user1 uploaded the files.
Centos is mapping user as 160011
openfiler is mapping user as 160010
windows is showing the user1 in the security tab.
So it appears that centos is not mapping the right numbers to the right users and groups.
If you need details please ask for it and I will provide.
Both configs are nearly a match and I have made small changes to the config files smb.conf but it failed resolve these issues to work so I reverted back. kinit works with authentication, getent works, wbinfo -a and -u works. wbinfo -u user shows different results on both servers, but authentication works user/password and I tried a different password to test.
Is this a known bug or a silly misconfiguration? I had authentication GUI tool configure the winbind stuff so its all fairly standard on the centos machine and the openfiler gui configure winbind configs.
i managed to make me a script to reconfigure automacitally my routing tables (wireless internet; wired a connected hotspot for my ftpd) now i need at last to remove line "2" from /etc/resolv.conf
when i try to
Code:
root@HP-Compaq-8510w:~# vi +2 --cmd "dd" /etc/resolv.conf
i get
Quote:
Error detected while processing pre-vimrc command line:
E492: Not an editor command: dd
Press ENTER or type command to continue
Debian 5.04 64bitGnome advise which package provides dpkg-reconfigure
View 3 Replies View RelatedI have Lenny with Gnome.Howto fix graphic in other way than:Code:dpkg-reconfigure server-xorg
View 5 Replies View Related