Zum Inhalt springen
View in the app

A better way to browse. Learn more.
Fachinformatiker.de

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Samba mit Active Directory

Gast ahu
Gast ahu
in Linux

Empfohlene Antworten

Veröffentlicht

jaja, das gute alte Thema, immer wieder ein Problem damit :)

Ich hab einen Active Directory Server Windows 2003 und möchte, dass sich die User an meinem Samba Linux Server darüber anmelden können. Die Authentifizierung an sich läuft auch an sich gut, aber NUR beim Benutzer die auch lokal angelegt in der /etc/passwd stehen, bei welchen die darin nicht stehen funktioniert das nicht.

Ich habe Samba 3.0.27 und hier mal meine Konfiguration:

[global]

        workgroup = ABC

        realm = ABC.DE

        server string = Samba Server

        security = ADS

        map to guest = Bad User

        password server = ABCDC01.abc.de ABCDC02.abc.de

        use kerberos keytab = Yes

        log file = /var/log/samba/log.%m

        max log size = 50

        time server = Yes

        os level = 65

        local master = No

        domain master = No

        wins support = Yes

        idmap uid = 10000-20000

        idmap gid = 10000-20000

        winbind separator = +

        winbind use default domain = Yes


[test]

        comment = test

        path = /test

        valid users = ABC+corpus, ABC+ahu

        read only = No
Der User ABC+corpus gibt es auch lokal und ich kann mich mit ihm anmelden und zwar mit dem Passwort aus dem Active Directory, nicht mit dem lokalen! Der Benutzer ABC+ahu existiert nur im Active Directory und mit dem kann ich mich nicht anmelden. Wenn ich 
useradd ahu

mache, kann ich mich auch mit dem anmelden.

Was mache ich falsch? Ich will eigentlich auch, dass alle Benutzer die sich anmelden, auf den lokalen Benutzer corpus gemappt werden von den Zugriffsrechten her. Dafür hätte ich bei der Freigabe force user = corpus benutzt. Ist das so richtig?

klar, mit

net ads join -U Administrator

net ads status


objectClass: top

objectClass: person

objectClass: organizationalPerson

objectClass: user

objectClass: computer

cn: abc-db

distinguishedName: CN=abc-db,OU=censhare,DC=abc,DC=de

instanceType: 4

whenCreated: 20100511105254.0Z

whenChanged: 20100512082251.0Z

uSNCreated: 22868319

uSNChanged: 22888893

name: abc-db

objectGUID: 2d75b621-8c62-4cc3-8f6f-c57c2ce976a2

userAccountControl: 69632

codePage: 0

countryCode: 0

localPolicyFlags: 0

pwdLastSet: 129180487745752173

primaryGroupID: 515

objectSid: S-1-5-21-1908643336-3031790836-1197610969-2596

accountExpires: 9223372036854775807

sAMAccountName: abc-db$

sAMAccountType: 805306369

dNSHostName: abc-db.abc.de

servicePrincipalName: HOST/abc-db.abc.de

servicePrincipalName: HOST/ABC-DB

objectCategory: CN=Computer,CN=Schema,CN=Configuration,DC=abc,DC=de

isCriticalSystemObject: FALSE

dSCorePropagationData: 20100512082251.0Z

dSCorePropagationData: 20100512082251.0Z

dSCorePropagationData: 20100512082251.0Z

dSCorePropagationData: 20100511123814.0Z

dSCorePropagationData: 16010721193112.0Z

lastLogonTimestamp: 129180487750283365

-------------- Security Descriptor (revision: 1, type: 0x8c14)

owner SID: S-1-5-21-1908643336-3031790836-1197610969-512

group SID: S-1-5-21-1908643336-3031790836-1197610969-513

------- (system) ACL (revision: 4, size: 120, number of ACEs: 2)

------- ACE (type: 0x07, flags: 0x5a, size: 0x38, mask: 0x20, object flags: 0x3)

access SID:  S-1-1-0

access type: AUDIT OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x07, flags: 0x5a, size: 0x38, mask: 0x20, object flags: 0x3)

access SID:  S-1-1-0

access type: AUDIT OBJECT

Permissions: 

        [Write All Properties]

------- (user) ACL (revision: 4, size: 3940, number of ACEs: 76)

------- ACE (type: 0x05, flags: 0x00, size: 0x48, mask: 0x20, object flags: 0x3)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-512

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x00, size: 0x48, mask: 0x20, object flags: 0x3)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-512

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x00, size: 0x48, mask: 0x20, object flags: 0x3)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-512

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x00, size: 0x48, mask: 0x20, object flags: 0x3)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-512

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x00, size: 0x38, mask: 0x8, object flags: 0x1)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-512

access type: ALLOWED OBJECT

Permissions: 

        [All validate writes]

------- ACE (type: 0x05, flags: 0x00, size: 0x38, mask: 0x8, object flags: 0x1)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-512

access type: ALLOWED OBJECT

Permissions: 

        [All validate writes]

------- ACE (type: 0x05, flags: 0x00, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-512

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x00, size: 0x38, mask: 0x30, object flags: 0x1)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-517

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x00, size: 0x2c, mask: 0x3, object flags: 0x1)

access SID:  S-1-5-32-550

access type: ALLOWED OBJECT

Permissions: 

        [Create All Child Objects]

        [Delete All Child Objects]

------- ACE (type: 0x05, flags: 0x00, size: 0x2c, mask: 0x10, object flags: 0x1)

access SID:  S-1-5-32-560

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x00, size: 0x28, mask: 0x100, object flags: 0x1)

access SID:  S-1-1-0

access type: ALLOWED OBJECT

Permissions: 

        [Change Password]

        [Reset Password]

------- ACE (type: 0x05, flags: 0x00, size: 0x28, mask: 0x8, object flags: 0x1)

access SID:  S-1-5-10

access type: ALLOWED OBJECT

Permissions: 

        [All validate writes]

------- ACE (type: 0x05, flags: 0x00, size: 0x28, mask: 0x8, object flags: 0x1)

access SID:  S-1-5-10

access type: ALLOWED OBJECT

Permissions: 

        [All validate writes]

------- ACE (type: 0x05, flags: 0x00, size: 0x28, mask: 0x30, object flags: 0x1)

access SID:  S-1-5-10

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

        [Write All Properties]

------- ACE (type: 0x00, flags: 0x00, size: 0x24, mask: 0x301d4)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-512

access type: ALLOWED

Permissions: 

        [List Contents]

        [Read All Properties]

        [Delete Subtree]

        [List Object]

        [Change Password]

        [Reset Password]

        [Delete]

        [Read Permissions]

------- ACE (type: 0x00, flags: 0x00, size: 0x24, mask: 0xf01ff)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-512

access type: ALLOWED

Permissions: [Full Control]

------- ACE (type: 0x00, flags: 0x00, size: 0x18, mask: 0xf01ff)

access SID:  S-1-5-32-548

access type: ALLOWED

Permissions: [Full Control]

------- ACE (type: 0x00, flags: 0x00, size: 0x14, mask: 0x3)

access SID:  S-1-5-10

access type: ALLOWED

Permissions: 

        [Create All Child Objects]

        [Delete All Child Objects]

------- ACE (type: 0x00, flags: 0x00, size: 0x14, mask: 0x20094)

access SID:  S-1-5-11

access type: ALLOWED

Permissions: 

        [List Contents]

        [Read All Properties]

        [List Object]

        [Read Permissions]

------- ACE (type: 0x00, flags: 0x00, size: 0x14, mask: 0xf01ff)

access SID:  S-1-5-18

access type: ALLOWED

Permissions: [Full Control]

------- ACE (type: 0x05, flags: 0x1a, size: 0x48, mask: 0x100, object flags: 0x3)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-1621

access type: ALLOWED OBJECT

Permissions: 

        [Change Password]

        [Reset Password]

------- ACE (type: 0x05, flags: 0x1a, size: 0x48, mask: 0x30, object flags: 0x3)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-1621

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x3c, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x3c, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x3c, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x3c, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x3c, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x3c, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x3c, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x3c, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x3c, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x100, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Change Password]

        [Reset Password]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x1, object flags: 0x1)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-1881

access type: ALLOWED OBJECT

Permissions: 

        [Create All Child Objects]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x3, object flags: 0x1)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-1655

access type: ALLOWED OBJECT

Permissions: 

        [Create All Child Objects]

        [Delete All Child Objects]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x10, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x10, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x10, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x10, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x10, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x10, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2127

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x20, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: 

        [Write All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0xf01ff, object flags: 0x1)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED OBJECT

Permissions: [Full Control]

------- ACE (type: 0x05, flags: 0x12, size: 0x38, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-9

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x38, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-9

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x38, mask: 0x10, object flags: 0x3)

access SID:  S-1-5-9

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x1a, size: 0x38, mask: 0xf01ff, object flags: 0x2)

access SID:  S-1-5-21-1908643336-3031790836-1197610969-1655

access type: ALLOWED OBJECT

Permissions: [Full Control]

------- ACE (type: 0x05, flags: 0x1a, size: 0x2c, mask: 0x20094, object flags: 0x2)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [List Contents]

        [Read All Properties]

        [List Object]

        [Read Permissions]

------- ACE (type: 0x05, flags: 0x1a, size: 0x2c, mask: 0x20094, object flags: 0x2)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [List Contents]

        [Read All Properties]

        [List Object]

        [Read Permissions]

------- ACE (type: 0x05, flags: 0x1a, size: 0x2c, mask: 0x20094, object flags: 0x2)

access SID:  S-1-5-32-554

access type: ALLOWED OBJECT

Permissions: 

        [List Contents]

        [Read All Properties]

        [List Object]

        [Read Permissions]

------- ACE (type: 0x05, flags: 0x12, size: 0x28, mask: 0x10, object flags: 0x1)

access SID:  S-1-5-20

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x28, mask: 0x10, object flags: 0x1)

access SID:  S-1-5-11

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

------- ACE (type: 0x05, flags: 0x12, size: 0x28, mask: 0x130, object flags: 0x1)

access SID:  S-1-5-10

access type: ALLOWED OBJECT

Permissions: 

        [Read All Properties]

        [Write All Properties]

        [Change Password]

        [Reset Password]

------- ACE (type: 0x00, flags: 0x12, size: 0x24, mask: 0x20094)

access SID:  S-1-5-21-3750646053-980421032-497267106-2129

access type: ALLOWED

Permissions: 

        [List Contents]

        [Read All Properties]

        [List Object]

        [Read Permissions]

------- ACE (type: 0x00, flags: 0x12, size: 0x24, mask: 0xf01ff)

access SID:  S-1-5-21-3750646053-980421032-497267106-519

access type: ALLOWED

Permissions: [Full Control]

------- ACE (type: 0x00, flags: 0x12, size: 0x18, mask: 0x4)

access SID:  S-1-5-32-554

access type: ALLOWED

Permissions: 

        [List Contents]

------- ACE (type: 0x00, flags: 0x12, size: 0x18, mask: 0xf01bd)

access SID:  S-1-5-32-544

access type: ALLOWED

Permissions: 

        [Create All Child Objects]

        [List Contents]

        [All validate writes]

        [Read All Properties]

        [Write All Properties]

        [List Object]

        [Change Password]

        [Reset Password]

        [Delete]

        [Read Permissions]

        [Modify Permissions]

        [Modify Owner]

-------------- End Of Security Descriptor
net ads info 

LDAP server: 172.16.100.5

LDAP server name: abcdc02

Realm: ABC.DE

Bind Path: dc=ABC,dc=DE

LDAP port: 389

Server time: Fri, 14 May 2010 13:33:20 CEST

KDC server: 172.16.100.5

Server time offset: 0

Achja noch zur Info, alles "abc" wurde von mir verändert, Domäne und Domaincontroller usw. heißen eigentlich etwas anders...

ja das geht auch

Wie gesagt, auch

wbinfo -a corpus%password

bzw.

wbinfo -a ahu%password

funktionieren, ich kann mich auch mit beiden Benutzern an der Freigabe anmelden und zwar mit dem Passwort aus dem Active Directory, aber eben NUR wenn der Benutzer auch noch in der /etc/passwd steht.

Aus dem Log, einmal as Benutzer ahu (nicht lokal) und einmal als benutzer corpus (auch lokal)

[2010/05/14 14:35:36, 2] auth/auth.c:(319)

  check_ntlm_password:  Authentication for user [ahu] -> [ahu] FAILED with error NT_STATUS_NO_SUCH_USER

[2010/05/14 14:35:57, 2] auth/auth.c:(309)

  check_ntlm_password:  authentication for user [corpus] -> [corpus] -> [corpus] succeeded

[2010/05/14 14:35:57, 1] smbd/service.c:(1042)

  ahu (192.168.213.254) connect to service test initially as user corpus (uid=861, gid=861) (pid 19335)

[2010/05/14 14:35:57, 2] smbd/open.c:(391)

  corpus opened file .DS_Store read=Yes write=No (numopen=1)

[2010/05/14 14:35:57, 2] smbd/close.c:(406)

  corpus closed file .DS_Store (numopen=0) NT_STATUS_OK

Die nsswitch.conf habe ich nicht angepasst, ich dachte die wäre dafür gut, damit ich grundsätzlich Active Directory Benutzer an dem Server anmelden können, also per Konsole oder SSH usw.

Aber ich will ja weiterhin einen lokalen Benutzer corpus haben, der auf jeden Fall unnabhängig ist von dem Active Directory.

ah okay, hab also in der nsswitch.conf ein bisschen was angepasst:

passwd:     files winbind

group:      files winbind
Trotzdem kein Erfolg :( Hab auch samba, winbind und nmbd alles durchgestart. Muss man da sonst noch was durchstarten? nsswitch.conf sollte aber gleich greifen denke ich, oder? Log sieht immer noch so aus 
[2010/05/14 14:50:38, 2] auth/auth.c:(319)

  check_ntlm_password:  Authentication for user [ahu] -> [ahu] FAILED with error NT_STATUS_NO_SUCH_USER

[2010/05/14 14:50:42, 2] auth/auth.c:(309)

  check_ntlm_password:  authentication for user [corpus] -> [corpus] -> [corpus] succeeded

[2010/05/14 14:50:42, 1] smbd/service.c:(1042)

  ahu (192.168.213.254) connect to service test initially as user corpus (uid=861, gid=861) (pid 19657)

[2010/05/14 14:50:42, 2] smbd/open.c:(391)

  corpus opened file .DS_Store read=Yes write=No (numopen=1)

[2010/05/14 14:50:42, 2] smbd/close.c:(406)

  corpus closed file .DS_Store (numopen=0) NT_STATUS_OK

[2010/05/14 14:50:42, 2] smbd/open.c:(391)

  corpus opened file .DS_Store read=Yes write=No (numopen=1)

[2010/05/14 14:50:42, 2] smbd/close.c:(406)

  corpus closed file .DS_Store (numopen=0) NT_STATUS_OK

Tja, ich fürchte die ganze Geschichte ist hinfällig :(

Die haben mir unter dem Hintern den AD Server auf 2008 R2 geupdatet und unter Solaris hab ich nur Samba 3.0.37 und so wie ich das sehe, ist das mit R2 nicht kompatibel.

Bei Solaris haben die nur Samba 3.0 mit drin, kein 3.1, 3.2, 3.3, 3.4

Und da hab ich die aktuellste Version 3.0.37

"einfach" mal updaten ist da nicht

Trotzdem vielen Dank für deine Hilfe. :)

Ist bei Solaris keine einfache Sache. Da müssen compiler und Library Path Variable simmen und die Abhängigkeiten.

Viel zu viel Aufwand

Erstelle ein Konto oder melde dich an, um einen Kommentar zu schreiben.

Zur Themenliste gehen

Configure browser push notifications
Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.