<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Thanks for the speedy reply. I think I found where you'd already mentioned that online anyway, I've got:<div><br></div><div>libnss_winbind.so -> /opt/csw/lib/libnss_winbind.so.1<br>nss_winbind.so.1 -> /opt/csw/lib/libnss_winbind.so.1</div><div><br></div><div>In /lib. Winbind itself seems to be working fine, I've got netatalk using that happily, it's the cswsamba version that won't seem to use winbind (it's either not using it properly, or it's using the wrong winbind somehow). Netatalk, using winbind, is fine.</div><div><br></div><div>Best regards,</div><div><br></div><div>James.</div><div><br></div><div>
<br><div><div>On 21 Jun 2013, at 06:24, Jan Holzhueter <<a href="mailto:jh@opencsw.org">jh@opencsw.org</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div style="letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Hi,<br>if you use the auth via pam you must symlink the nss_winbind to a<br>special place. I'm not sure which one atm. Check the orginal OI samba<br>package that should put it in the right place.<br>We can't add this to our package as this would brake install on sparse<br>zones.<br>I wanted to write a short notice about it put did not have the time yet.<br>It might be that you even need to copy and not symlink the lib. Not sure<br>here.<br><br>Greetings<br>Jan<br><br><br><br>Am 21.06.13 07:15, schrieb James Relph:<br><blockquote type="cite">Hi,<br><br>Apologies for cross posting, but I'm not sure if this is an Oi issue or<br>a cswsamba issue. I've installed cswsamba (3.6.15) and cswsamba_winbind<br>on an OI box (151a7). I've got it bound to AD fine, and winbind itself<br>seems to be operating perfectly (I've actually got netatalk happily<br>authenticating AD users via winbind). If I run wbinfo -u or getent<br>passwd, I get the expected information back.<br><br>Oddly though Samba itself isn't authenticating users. If I try and<br>login (with a few variations of DOMAIN\username or username@DOMAIN) it<br>just kicks it back as an unknown user (see below). The only thing that<br>I can think of is that the cswsamba is actually still calling the<br>previously installed (but turned off) winbind that I installed with the<br>original OI samba install. With that not running though I wouldn't have<br>thought that would have happened (but if that could be it - how do I<br>make sure that cswsamba uses cswsamba_winbind). I have symlinked the<br>csw nss_winbind libraries into /lib, I just don't know if there's<br>anything else that could cause this.<br><br>Thanks for any help.<br><br>James<br><br>Principal Consultant<br><br><br> Mapping user [DOMAIN]\[james] from workstation [server03]<br> attempting to make a user_info for james (james)<br> making strings for james's user_info struct<br> making blobs for james's user_info struct<br> check_ntlm_password: Checking password for unmapped user<br>[DOMAIN]\[james]@[server03] with the new password interface<br> check_ntlm_password: mapped user is: [DOMAIN]\[james]@[server03]<br> Finding user DOMAIN\james<br> Trying _Get_Pwnam(), username as lowercase is DOMAIN\james<br> Trying _Get_Pwnam(), username as given is DOMAIN\james<br> Checking combinations of 0 uppercase letters in DOMAIN\james<br> Get_Pwnam_internals didn't find user [DOMAIN\james]!<br> Finding user james<br> Trying _Get_Pwnam(), username as lowercase is james<br> Checking combinations of 0 uppercase letters in james<br> Get_Pwnam_internals didn't find user [james]!<br> Failed to find authenticated user DOMAIN\james via getpwnam(), denying<br>access.<br> check_ntlm_password: winbind authentication for user [james] FAILED<br>with error NT_STATUS_NO_SUCH_USER<br> check_ntlm_password: Authentication for user [james] -> [james]<br>FAILED with error NT_STATUS_NO_SUCH_USER<br> Got user=[<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>]<br>domain=[DOMAIN] workstation=[server03] len1=24 len2=124<br> Mapping user [DOMAIN]\[<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>]<br>from workstation [server03]<br> attempting to make a user_info for<span class="Apple-converted-space"> </span><a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><br><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>> (<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>)<br> making strings for<span class="Apple-converted-space"> </span><a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>'s<br>user_info struct<br> making blobs for<span class="Apple-converted-space"> </span><a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>'s<br>user_info struct<br> check_ntlm_password: Checking password for unmapped user<br>[DOMAIN]\[<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>]@[server03] with<br>the new password interface<br> check_ntlm_password: mapped user is: [DOMAIN]\[<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><br><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>]@[server03]<br> check_ntlm_password: winbind authentication for user<br>[<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>] FAILED with error<br>NT_STATUS_NO_SUCH_USER<br> check_ntlm_password: Authentication for user [<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><br><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>] -> [<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><br><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>] FAILED with error NT_STATUS_NO_SUCH_USER<br> Got user=[<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>]<br>domain=[DOMAIN] workstation=[server03] len1=24 len2=124<br> Mapping user [DOMAIN]\[<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>]<br>from workstation [server03]<br> attempting to make a user_info for<span class="Apple-converted-space"> </span><a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><br><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>> (<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>)<br> making strings for<span class="Apple-converted-space"> </span><a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>'s<br>user_info struct<br> making blobs for<span class="Apple-converted-space"> </span><a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>'s<br>user_info struct<br> check_ntlm_password: Checking password for unmapped user<br>[DOMAIN]\[<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>]@[server03] with<br>the new password interface<br> check_ntlm_password: mapped user is: [DOMAIN]\[<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><br><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>]@[server03]<br> check_ntlm_password: winbind authentication for user<br>[<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><span class="Apple-converted-space"> </span><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>] FAILED with error<br>NT_STATUS_NO_SUCH_USER<br> check_ntlm_password: Authentication for user [<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><br><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>] -> [<a href="mailto:james@DOMAIN.CORP">james@DOMAIN.CORP</a><br><<a href="mailto:james@DOMAIN.CORP">mailto:james@DOMAIN.CORP</a>>] FAILED with error NT_STATUS_NO_SUCH_USER<br><br><br>_______________________________________________<br>users mailing list<br><a href="mailto:users@lists.opencsw.org">users@lists.opencsw.org</a><br><a href="https://lists.opencsw.org/mailman/listinfo/users">https://lists.opencsw.org/mailman/listinfo/users</a><br><br></blockquote><br>_______________________________________________<br>users mailing list<br><a href="mailto:users@lists.opencsw.org">users@lists.opencsw.org</a><br><a href="https://lists.opencsw.org/mailman/listinfo/users">https://lists.opencsw.org/mailman/listinfo/users</a></div></blockquote></div><br></div></body></html>