AW: Winbind 3.6 keine Übernahme von Active Directory User & Gruppen
Hi Alex,
hab die Änderungen an der smb.conf gemacht. Der Teil sieht jetzt so aus:
idmap config * : backend = tdp
idmap config * : range = 10000-20000
idmap config CARD : backend = tdp
idmap config CARD : range = 10000-20000
idmap config CARD : base_rid = 0
# idmap uid = 10000-20000
# idmap gid = 10000-20000
Dann:
/etc/init.d/winbind stop
/etc/init.d/samba restart
/etc/init.d/winbind start
Hat sich allerdings nichts geändert :/ Bekomme immer noch keine AD-Gruppen angezeigt
Ich hab das loglevel mal hochgesetzt auf "log level = 10"
In der die /var/log/samba/log.winbindd-idmap tut sich nichts (steht auch überhaupt nichts drin):
-rw-r--r-- 1 root root 0 6. Dez 12:53 log.winbindd-idmap
Die /var/log/samba/log.winbind hat dafür umso mehr:
[2013/12/12 11:39:31, 0] winbindd/winbindd.c:1346(main)
winbindd version 3.6.6 started.
Copyright Andrew Tridgell and the Samba Team 1992-2011
[2013/12/12 11:39:31, 5] ../lib/util/debug.c:330(debug_dump_status)
INFO: Current debug levels:
all: 10
tdb: 10
printdrivers: 10
lanman: 10
smb: 10
rpc_parse: 10
rpc_srv: 10
rpc_cli: 10
passdb: 10
sam: 10
auth: 10
winbind: 10
vfs: 10
idmap: 10
quota: 10
acls: 10
locking: 10
msdfs: 10
dmapi: 10
registry: 10
doing parameter syslog = 0
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 1000
doing parameter syslog only = yes
doing parameter panic action = /usr/share/samba/panic-action %d
doing parameter encrypt passwords = true
doing parameter passdb backend = tdbsam
doing parameter obey pam restrictions = yes
doing parameter unix password sync = no
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdate
doing parameter pam password change = yes
doing parameter socket options = TCP_NODELAY IPTOS_LOWDELAY
doing parameter guest account = nobody
doing parameter load printers = no
doing parameter disable spoolss = yes
doing parameter printing = bsd
doing parameter printcap name = /dev/null
doing parameter unix extensions = yes
doing parameter wide links = no
doing parameter create mask = 0777
doing parameter directory mask = 0777
doing parameter use sendfile = yes
doing parameter aio read size = 16384
doing parameter aio write size = 16384
doing parameter null passwords = no
[2013/12/12 11:39:31, 1] param/loadparm.c:7992(lp_do_parameter)
WARNING: The "null passwords" option is deprecated
doing parameter local master = yes
doing parameter time server = no
doing parameter wins support = no
[2013/12/12 11:39:31, 4] param/loadparm.c:9608(lp_load_ex)
pm_process() returned Yes
[2013/12/12 11:39:31, 7] param/loadparm.c:9834(lp_servicenumber)
lp_servicenumber: couldn't find homes
[2013/12/12 11:39:31, 10] param/loadparm_server_role.c:101(set_server_role)
set_server_role: role = ROLE_DOMAIN_MEMBER
[2013/12/12 11:39:31, 5] ../lib/util/charset/codepoints.c:235(map_locale)
Substituting charset 'UTF-8' for LOCALE
[2013/12/12 11:39:31, 3] lib/fault.c:318(dump_core_setup)
Maximum core file size limits now 16777216(soft) -1(hard)
[2013/12/12 11:39:31, 2] lib/tallocmsg.c:124(register_msg_pool_usage)
Registered MSG_REQ_POOL_USAGE
[2013/12/12 11:39:31, 2] lib/dmallocmsg.c:78(register_dmalloc_msgs)
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
Viele Grüße,
Steffen
-----Ursprüngliche Nachricht-----
Von: Alexander W. [mailto:hondansx@gmx.de]
Gesendet: Donnerstag, 12. Dezember 2013 10:46
An: debian-user-german@lists.debian.org
Betreff: AW: Winbind 3.6 keine Übernahme von Active Directory User & Gruppen
| #======================= Global Settings =======================
| [global] workgroup = CARD realm = card.de netbios name = NAS2 security
| = ADS # idmap config * : backend = rid # idmap config * : range =
| 10000-20000 # idmap config CARD : backend = rid # idmap config CARD :
| range = 10000-20000 # idmap config CARD : base_rid = 0 idmap uid =
| 10000-20000 idmap gid = 10000-20000 template shell = /bin/bash winbind
| use default domain = yes winbind enum users = yes winbind enum groups
| = yes # winbind separator = + domain master = no local master = no
| preferred master = no server string = %h server include =
| /etc/samba/dhcp.conf dns proxy = no log level = 0 syslog = 0 log file
| = /var/log/samba/log.%m
Hallo Steffen,
kommentiere die idmap config Parameter aus und probiere als Backend tdb also:
#======================= Global Settings ======================= idmap config * : backend = tdb idmap config * : range = 10000-20000 idmap config CARD : backend = tdb idmap config CARD : range = 10000-20000 idmap config CARD : base_rid = 0
Ansonsten würde ich den 'log level' erhöhen und mir die /var/log/samba/log.winbindd-idmap ansehen.
Gruß,
Alex
--
Zum AUSTRAGEN schicken Sie eine Mail an debian-user-german-REQUEST@lists.debian.org
mit dem Subject "unsubscribe". Probleme? Mail an listmaster@lists.debian.org (engl)
Archive: [🔎] ccc32a9c91bfa0d9caac30e650cfe92a.squirrel@yaris.dyndns.org">http://lists.debian.org/[🔎] ccc32a9c91bfa0d9caac30e650cfe92a.squirrel@yaris.dyndns.org
Reply to: