Мне нужно сделать авторизацию squid через AD. Возникла проблема - не могу войти в домен, время тоже не сихронизируется. Подскажите, пожалуйста, в чем может быть дело.
Код: Выделить всё
net join ads -U djoin
djoin's password:
[2013/11/13 10:29:17, 0] utils/net_ads.c:ads_startup(289)
ads_connect: Server not found in Kerberos database
ADS join did not work, falling back to RPC...
Unable to find a suitable server
Unable to find a suitable server
angel2# net time set
Could not locate a time server. Try specifying a target host.Версия FreeBSD 5.5-STABLE, samba-3.0.24,1
Конфиг:
Код: Выделить всё
angel2# testparm
Load smb config files from /usr/local/etc/smb.conf
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions
[global]
dos charset = cp866
unix charset = koi8-r
display charset = koi8-r
workgroup = TL5
realm = TL5.AD
server string = angel2.tl5.ad
security = ADS
password server = 172.17.165.120
passdb backend = tdbsam
log file = /var/log/samba/log.%m
max log size = 500
load printers = No
os level = 0
preferred master = No
local master = No
domain master = No
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = Yes
winbind enum groups = Yes
hosts allow = 192.168.1., 192.168.2., 127.,Код: Выделить всё
angel2# more /etc/nsswitch.conf
group: files winbind
group_compat: nis
hosts: files dns
networks: files
passwd: files winbind
passwd_compat: nis
shells: filesКод: Выделить всё
angel2# more /etc/rc.conf | grep wi
winbindd_enable="YES"
winbindd_flags="-d 9"Kerberos причем работает, хотя как я понял его использование не обязательно.
Код: Выделить всё
angel2# klist
Credentials cache: FILE:/tmp/krb5cc_0
Principal: djoin@TL5.AD
Issued Expires Principal
Nov 13 10:04:25 Nov 13 20:04:25 krbtgt/TL5.AD@TL5.AD
Код: Выделить всё
angel2# /usr/local/etc/rc.d/samba.sh restart
Performing sanity check on Samba configuration: OK
winbindd not running? (check /var/run/winbindd.pid).
Removing stale Samba tdb files: .. done
Starting winbindd.
angel2# ps ax | grep winb
28397 p1 RL+ 0:00.00 grep winbКод: Выделить всё
[2013/11/13 10:29:04, 5] lib/debug.c:debug_dump_status(391)
INFO: Current debug levels:
all: True/9
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
quota: False/0
acls: False/0
locking: False/0
msdfs: False/0
dmapi: False/0
[2013/11/13 10:29:04, 1] nsswitch/winbindd.c:main(953)
winbindd version 3.0.24 started.
Copyright The Samba Team 2000-2004
[2013/11/13 10:29:04, 3] param/loadparm.c:lp_load(4950)
lp_load: refreshing parameters
[2013/11/13 10:29:04, 3] param/loadparm.c:init_globals(1410)
Initialising global parameters
[2013/11/13 10:29:04, 3] param/params.c:pm_process(572)
params.c:pm_process() - Processing configuration file "/usr/local/etc/smb.conf"
[2013/11/13 10:29:04, 3] param/loadparm.c:do_section(3687)
Processing section "[global]"
doing parameter netbios name = angel2
[2013/11/13 10:29:04, 4] param/loadparm.c:handle_netbios_name(3045)
handle_netbios_name: set global_myname to: ANGEL2
doing parameter workgroup = TL5
doing parameter server string = angel2.tl5.ad
doing parameter security = ads
doing parameter hosts allow = 192.168.1. 192.168.2. 127.
doing parameter load printers = no
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 500
doing parameter password server = 172.17.165.120
doing parameter realm = TL5.AD
doing parameter passdb backend = tdbsam
doing parameter socket options = TCP_NODELAY
doing parameter local master = no
doing parameter os level = 0
doing parameter domain master = no
doing parameter preferred master = no
doing parameter domain logons = no
doing parameter display charset = koi8-r
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UCS-2LE
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UCS-2LE
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UTF-16LE
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UTF-16LE
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UCS-2BE
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UCS-2BE
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UTF-16BE
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UTF-16BE
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UTF8
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UTF8
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UTF-8
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UTF-8
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset ASCII
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(113)
Registered charset ASCII
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset 646
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(113)
Registered charset 646
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset ISO-8859-1
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(113)
Registered charset ISO-8859-1
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(105)
Attempting to register new charset UCS2-HEX
[2013/11/13 10:29:04, 5] lib/iconv.c:smb_register_charset(113)
Registered charset UCS2-HEX
doing parameter unix charset = koi8-r
doing parameter dos charset = cp866
doing parameter winbind use default domain = no
doing parameter winbind uid = 10000-20000
doing parameter winbind gid = 10000-20000
doing parameter winbind enum users = yes
doing parameter winbind enum groups = yes
[2013/11/13 10:29:04, 4] param/loadparm.c:lp_load(4981)
pm_process() returned Yes
[2013/11/13 10:29:04, 7] param/loadparm.c:lp_servicenumber(5117)
lp_servicenumber: couldn't find homes
[2013/11/13 10:29:04, 8] param/loadparm.c:add_a_service(2495)
add_a_service: Creating snum = 0 for IPC$
[2013/11/13 10:29:04, 3] param/loadparm.c:lp_add_ipc(2629)
adding IPC service
[2013/11/13 10:29:04, 2] lib/interface.c:add_interface(81)
added interface ip=
[2013/11/13 10:29:04, 5] lib/util.c:init_names(286)
Netbios name list:-
my_netbios_names[0]="ANGEL2"
[2013/11/13 10:29:04, 2] lib/interface.c:add_interface(81)
added interface ip=
[2013/11/13 10:29:04, 5] lib/gencache.c:gencache_init(61)
Opening cache file at /var/db/samba/gencache.tdb
[2013/11/13 10:29:04, 5] libsmb/namecache.c:namecache_enable(58)
namecache_enable: enabling netbios namecache, timeout 660 seconds
[2013/11/13 10:29:04, 5] sam/idmap.c:smb_register_idmap(93)
smb_register_idmap: Successfully added idmap backend 'ldap'
[2013/11/13 10:29:04, 5] sam/idmap.c:smb_register_idmap(93)
smb_register_idmap: Successfully added idmap backend 'tdb'
[2013/11/13 10:29:04, 8] lib/util.c:fcntl_lock(1959)
fcntl_lock fd=8 op=8 offset=0 count=1 type=3
[2013/11/13 10:29:04, 8] lib/util.c:fcntl_lock(1978)
fcntl_lock: Lock call successful
[2013/11/13 10:29:04, 4] lib/time.c:TimeInit(136)
TimeInit: Serverzone is -14400
[2013/11/13 10:29:04, 2] lib/tallocmsg.c:register_msg_pool_usage(61)
Registered MSG_REQ_POOL_USAGE
[2013/11/13 10:29:04, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71)
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2013/11/13 10:29:04, 0] nsswitch/winbindd_util.c:init_domain_list(518)
Could not fetch our SID - did we join?
[2013/11/13 10:29:04, 0] nsswitch/winbindd.c:main(1051)
unable to initalize domain list
