From owner-freebsd-questions@FreeBSD.ORG  Mon Jan 26 12:18:46 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6021816A4CE
	for <questions@freebsd.org>; Mon, 26 Jan 2004 12:18:46 -0800 (PST)
Received: from bragi.housing.ufl.edu (bragi.housing.ufl.edu [128.227.47.18])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8025743D39
	for <questions@freebsd.org>; Mon, 26 Jan 2004 12:18:44 -0800 (PST)
	(envelope-from WillS@housing.ufl.edu)
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
Date: Mon, 26 Jan 2004 15:18:43 -0500
Message-ID: <0E972CEE334BFE4291CD07E056C76ED8CBBE20@bragi.housing.ufl.edu>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: winbind under 5.2
Thread-Index: AcPkSZhK8Bl0qFvoR7qsUSG4NJaKzw==
From: "Will Saxon" <WillS@housing.ufl.edu>
To: <questions@freebsd.org>
Subject: winbind under 5.2
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 26 Jan 2004 20:18:46 -0000

Heloo,

I am trying to use the winbind functions of Samba on a 5.2-RELEASE =
system. I am able to enumerate users and groups per the documentation =
using wbinfo -u/-g, although while the examples show the output as being =
'DOMAIN+user' or 'DOMAIN+group' I do not see the 'DOMAIN' part.

I have copied the pam_winbind and nss_winbind modules to appropriate =
places and have confirmed that libnss_winbind is in the cache. I have =
nsswitch.conf edited properly. I have winbindd loaded, etc. however I am =
not able to assign permissions using domain accounts and I am not able =
to resolve domain password entries via pw.

I am trying to use this combination (FreeBSD/Samba) instead of Win2k =
Server for our file server needs, but I need to be able to set =
permissions for roaming user profiles and shared directories as we =
depend heavily on a terminal server/thin client environment.

Relevant portions of my smb.conf file:

[global]
netbios name =3D samba
workgroup =3D <NT_DOMAIN_NAME>
realm =3D <DNS.DOMAIN.SUFFIX>
security =3D ADS
encrypt passwords =3D yes
password server =3D <dns name of a global catalog domain controller>
winbind separator =3D +
idmap uid =3D 10000-20000
idmap gid =3D 10000-20000
winbind enum users =3D yes
winbind enum groups =3D yes
winbind use default domain =3D yes