I have installed following packages from perzl
samba-winbind-clients-3.6.22-1
samba-client-3.6.22-1
samba-domainjoin-gui-3.6.22-1
samba-winbind-devel-3.6.22-1
samba-3.6.22-1
samba-common-3.6.22-1
samba-winbind-krb5-locator-3.6.22-1
samba-doc-3.6.22-1
samba-swat-3.6.22-1
samba-winbind-3.6.22-1
libsmbclient-3.6.22-1
libsmbclient-devel-3.6.22-1
but I only find this files under /opt/freeware/lib/security :
Code:
# pwd
/opt/freeware/lib/security
# ls -al
total 6624
drwxr-xr-x 2 root system 256 Sep 19 08:51 .
drwxr-xr-x 15 root system 8192 Sep 19 08:51 ..
-rwxr-xr-x 1 root system 3225482 Dec 10 2013 pam_smbpass.so
-rwxr-xr-x 1 root system 155064 Dec 10 2013 pam_winbind.so
WINBIND module is missing and I have executed a find command for WINBIIND and is not located at any path.
I can join the Domain correctly and wbinfo –u works but I can not access any shares , I guess it is because I’m missing that module.
Code:
check_ntlm_password: Authentication for user [XXXXXX] -> [XXXXXX] FAILED witherror NT_STATUS_NO_SUCH_USER
Moderator's Comments:
Please use code tags next time for your code and data. Thanks
Last edited by vbe; 09-19-2014 at 05:49 AM..
Reason: code tags
Since you have wbinfo I dont believe its missing...
Have you configured correctly kerberos, smb.conf, methods.conf?
Have you tried the other options of wbinfo? Have you looked in the logs?
but I execute find / -name WINBIND and I can not find anything.
methods.cfg :
Code:
WINBIND:
program = /usr/lib/security/WINBIND
LDAP:
program = /usr/lib/security/LDAP
program_64 = /usr/lib/security/LDAP64
NIS:
program = /usr/lib/security/NIS
program_64 = /usr/lib/security/NIS_64
DCE:
program = /usr/lib/security/DCE
PAM:
program = /usr/lib/security/PAM
kerberos and smb.conf are correct , I have another aix 5.3 machines working fine .
I can get a ticket with kerberos:
Code:
kinit user
asks for password and then I get sucess messages :
Done!
New ticket is stored in cache file //krb5cc_root
This is my smb.conf :
Code:
[global]
workgroup = MYDOMAIN
realm = MYDOMAIN.COM
server string = Samba server
security = ADS
log file = /var/log/samba/log.%m
dos filetime resolution = yes
debug level = 2
max log size = 1000
winbinduid = 30000-40000
winbindgid = 30000-40000
winbind enum users = Yes
winbind enum groups = Yes
winbind separator = +
winbind use default domain = Yes
winbind nested groups = No
read only = No
lock directory = /var/locks/samba
socket options = TCP_NODELAY
allow trusted domains = no
panic action = "/usr/bin/sleep 90000"
nmbd bind explicit broadcast = no
[TMP]
comment = TMP
path = /tmp
valid_users = "MYDOMAIN+myuser"
When I try to access TMP share with my user I get a login window and I can not access even setting user and password.
i get this message in the log file :
Code:
[2014/09/19 12:33:30.507018, 2] auth/auth.c:319(check_ntlm_password)
check_ntlm_password: Authentication for user [myuser] -> [myuser] FAILED with error NT_STATUS_NO_SUCH_USER
Moderator's Comments:
Please use code tags next time for your code and data. Thanks
Ive been also able to generate a ticket for a user on my aix that is not known in the AD...
Then this is client side, what about the smb.conf or it equivalent in WINDOWS? who does it allow to mount?
sorry , I did not explain it correctly .
The ticket is created in the aix client machine with a windows user , I execute :
Code:
> kinit myuser
Password for myuser@MYDOMAIN.COM:
I type windows passwdor and then
Code:
Done!
New ticket is stored in cache file //krb5cc_root
So aix client's kerberos configuration with windows domain controller is Ok.
what you mean for smb.conf equivalent in windows?
Samba is configured for windows authentication so the domain controller is supposed to allow access to the share.
I'm going to try to find any messages in the windows dc.
but I still do not understand if samba installation has gone Ok why can not find WINBIND module in the aix client...
because I have no more AIX smb servers since last year and cant remember all but I think there was winbind stuff but lowercase in my mind like winbindd...
Welcome to
AIX - All Intricacies eXplained
List of AIX commands lacking documentation:
mkinstallp (create installable packages)
imfs (create FS entries in /etc/filesystems)
getlvodm (get LVM information from LVCB and ODM)
ldeletepv (delete phantom disks from ODM)
lqueryvg (lists... (1 Reply)
Hi all,
I have installed samba 3.6.22 on AIX 7.1 and join a windows AD with success.
All seem to work fine, I have configured smb.conf, methods.cfg, kerberos, user .... the following command work fine wbinfo -u, wbinfo -g, wbinfo -i, wbinfo -s, wbinfo -S, lsuser, id...
The unique... (20 Replies)
I have joined an AIX 7.1 into a 2012 AD domain sucesfully.
I can get ouput from wbinfo -u but when I try to access a share I get the following error :
check_ntlm_password: Authentication for user -> FAILED with
error NT_STATUS_NO_SUCH_USER
I have found that I'm missing... (0 Replies)
I configured AIX5.3 to use kerberos and winbind so user can login and authenticate via AD. I was able to join my AIX server to domain and can execute wbinfo -u/g. However when I login, It says unknown user. I already edit /etc/secuirty/user and then method.cfg.
On the log.winbindd it says
... (0 Replies)
I am encountering the above error , even after setting the environment variables correctly AFAIK. I've found sources that say LIBPATH is the shared library variable , and others that say LIB_PATH, so I set both:
=========================
root@lipossrp01ga: # echo $gtm_dist ... (6 Replies)
Please anyone tell me "What is the command to view missing filesets in aix"
Thanks in advance
---------- Post updated at 09:34 PM ---------- Previous update was at 05:09 PM ----------
Please anyone tell me "What is the command to view missing filesets in aix"
Thanks in advance (3 Replies)
Hi forum,
I have two servers. Both running same version 4.3.3 TL11.
On one of them efix IX85104 is installed but missing on another server.
I have tried to find it and download it but it's just too old.
Is there any way that I could extract/copy this efix from server where it's present... (1 Reply)
Hi
I need to enable double buffering support for x11, this is supposed to be as simple as loading the "dbe" module but it doesn't exist on my system.
The source for this module appears to be in the package libxext6, but that is already installed and only creates \usr\lib\libXext.so.6.4.0
Does... (4 Replies)
09-19-2014
