Несколкьо вопросов по sambe 3.5 d AD

bagas · Непрочитанное сообщение **bagas** » 2011-01-26 11:15:16

Доброе утро!
1.Проблема
синхронизовал время с контролером
ntpdate 10.7.0.3

установил Samab'u 3.5.6 с такими опциями:

Код: Выделить всё

# make showconfig
===> The following configuration options are available for samba35-3.5.6_1:
     LDAP=on "With LDAP support"
     ADS=on "With Active Directory support"
     CUPS=off "With CUPS printing support"
     WINBIND=on "With WinBIND support"
     SWAT=on "With SWAT WebGUI"
     ACL_SUPPORT=on "With ACL support"
     AIO_SUPPORT=off "With Asyncronous IO support"
     FAM_SUPPORT=off "With File Alteration Monitor"
     SYSLOG=on "With Syslog support"
     QUOTAS=off "With Disk quota support"
     UTMP=off "With UTMP accounting support"
     PAM_SMBPASS=on "With PAM authentication vs passdb backends"
     DNSUPDATE=off "With dynamic DNS update(require ADS)"
     AVAHI=off "With Bonjour service discovery support"
     EXP_MODULES=off "With experimental modules"
     POPT=on "With system-wide POPT library"
     IPV6=off "With IPv6 support"
     MAX_DEBUG=off "With maximum debugging"
     SMBTORTURE=off "With smbtorture"
===> Use 'make config' to modify these settings

система собрана с поддержкой
настроил керберос

Код: Выделить всё

[libdefaults]
        default_realm = EXAMPLE.RU
        clockskew = 300
        ticket_lifetime = 24000
        v4_instance_resolve = false
        v4_name_convert = {
                host = {
                        rcmd = host
                        ftp = ftp
                }
                plain = {
                        something = something-else
                }
        }

[realms]
        EXAMPLE.RU = {
                kdc = S895NT12.EXAMPLE.RU
                admin_server = S895NT12.EXAMPLE.RU
                kpasswd_server = EXAMPLE.RU
        }

[domain_realm]
        .example.ru = EXAMPLE.RU

настроил систему баз данных и переключения имен.
/etc/nsswitch.conf

Код: Выделить всё

group: files winbind
passwd: files winbind
shadow: files winbind
group_compat: nis
hosts: files dns
networks: files
passwd_compat: nis
shells: files
services: compat
services_compat: nis
protocols: files
rpc: files

настроил самбу
/usr/local/etc/smb.conf

Код: Выделить всё

[global]
        dos charset = cp866
        unix charset = koi8-r
        display charset = koi8-r
        workgroup = Minb
        allow trusted domains = no
        encrypt passwords = yes
        realm = EXAMPLE.RU
        server string = Samba
        interfaces = re0
        bind interfaces only = Yes
        security = ads
        password server = 10.7.0.3
        log level = 3
        log file = /var/log/samba/log.%m
        max log size = 1000
        smb ports = 139
        name resolve order = host lmhost bcast
        deadtime = 5
        socket options = SO_RCVBUF=8192 SO_SNDBUF=8192 TCP_NODELAY
        load printers = No
        local master = No
        domain master = No
        dns proxy = No
        wins server = 10.7.0.2, 10.7.0.3
        socket address = 10.7.20.210
        winbind uid = 10000-20000
        winbind gid = 10000-20000
        winbind enum groups = yes
        winbind enum users = yes
        winbind separator = +
        winbind cache time = 604800
        winbind use default domain = Yes
        hosts allow = 10.7.20., 10.7.0., 127.
        netbios name = pav-210
        template shell=/bin/tcsh
        template homedir = /home/%D/%U
#       client use spnego = yes
        auth methods = winbind
        nt acl support = yes

стартанул сервис самбы.
получил билет.
ввел в домен машину net ads join -U Ad
проверяю
# wbinfo -t
checking the trust secret for domain MINB via RPC calls succeeded

# wbinfo -p
Ping to winbindd succeeded

#wbinfo -g видит все группы

# wbinfo -u
pav-210#
а вот с пользователями не хочет...в чем я ошибся.
если посмотреть через id доменный_пользователь то его видно , показываеться в каких группах состоит.

/etc/rc.conf

Код: Выделить всё

winbindd_enable="YES"
nmbd_enable="YES"
smbd_enable="YES"
kerberos5_server_enable="YES"

и 2 проблема..
почему я не могу через винду пермишенов через галочьки

Код: Выделить всё

# cat /etc/fstab
# Device                Mountpoint      FStype  Options         Dump    Pass#
/dev/ad0s1b             none            swap    sw              0       0
/dev/ad0s1a             /               ufs     rw              1       1
/dev/ad0s1g             /mnt/share              ufs     rw,acls         2       2
/dev/ad0s1d             /tmp            ufs     rw              2       2
/dev/ad0s1f             /usr            ufs     rw              2       2
/dev/ad0s1e             /var            ufs     rw              2       2
/dev/acd0               /cdrom          cd9660  ro,noauto       0       0
pav-210#

в однопользовательском режиме перегружался включал поддержку tunefs -a enable /mnt/share
ядро собрано с поддержкой acl

Код: Выделить всё

options         UFS_ACL                 # Support for access control lists

в smb.conf

Код: Выделить всё

[Share]
     read list = "@Minb\Domain Users"
     write list = "@Minb\Domain Admins"
     read only = no
     browseable = yes
     path = /mnt/share
     comment = Моя шара
     create mask = 0770
     map acl inherit         = yes
     map archive             = no
     map read only           = no

Код: Выделить всё

drwxrwx--x   4 bagrich  10049  512 25 янв 20:13 share

Код: Выделить всё

# getfacl -d /mnt/share/
# file: /mnt/share/
# owner: ad
# group: 10049
user::rw-
user:ad:rw-
group::r--
mask::rw-
other::---

Код: Выделить всё

uname -a
FreeBSD pav-210.example.ru 8.1-RELEASE FreeBSD 8.1-RELEASE #0: Mon Jan 24 11:54:36 OMST 2011     root@pav-210.example.ru:/usr/obj/usr/src/sys/MINB2011  amd64

при изменении галочек с венды ругаеться что типа нету прав.

Хостинг HostFood.ru · **Хостинг HostFood.ru**

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

bagas · Непрочитанное сообщение **bagas** » 2011-01-26 15:09:25

Код: Выделить всё

drwxrwx--x   4 ad  10049  512 25 янв 20:13 share

snorlov · Непрочитанное сообщение **snorlov** » 2011-01-26 16:33:41

а что дает

Код: Выделить всё

getent passwd
getent group

Увеличь

Код: Выделить всё

       winbind uid = 10000-40000
       winbind gid = 10000-40000

bagas · Непрочитанное сообщение **bagas** » 2011-01-26 17:22:01

если я не ошибаюсь
getent passwd
getent group
можно просмотреть как лольного народа, так и доменного.

сделал ка вы посоветовали, увеличил
winbind uid = 13000-40000
winbind gid = 13000-40000

непомогает.

snorlov · Непрочитанное сообщение **snorlov** » 2011-01-26 17:41:03

Может у вас пользователи на русском.. А в логах самого winbind'а что пишется...

bagas · Непрочитанное сообщение **bagas** » 2011-01-26 19:31:08

На моей памети не было, а так не я один добавляю учетки..в логах завтра только смогу выложить.но в сети есть еще одна фаел-помойка поднятая на фряя..но там используется самба 3.4. с такими же данными. и там я могу просмотреть доменный народ. но почему через id я же могу просмотреть какие группы присутствуют на пользователе

snorlov · Непрочитанное сообщение **snorlov** » 2011-01-27 0:20:34

может еще задизаблить

Код: Выделить всё

smb ports=139

хотя не уверен, но добавить в интерфейсы локалхост надо...

bagas · Непрочитанное сообщение **bagas** » 2011-01-27 12:12:03

большинство пользователей на кирилице , но это ничего не меняет. но вторая машина с поднятой такими-же конфигом работает.
у кого еще будут какие предложения.

snorlov · Непрочитанное сообщение **snorlov** » 2011-01-27 12:20:50

bagas писал(а):большинство пользователей на кирилице , но это ничего не меняет. но вторая машина с поднятой такими-же конфигом работает.
у кого еще будут какие предложения.

Только одно, версии разные

bagas · Непрочитанное сообщение **bagas** » 2011-01-27 16:01:39

да.придется откатываться на версию 3.4 .

snorlov · Непрочитанное сообщение **snorlov** » 2011-01-27 16:42:49

Ты кстати лог winbind'а не привел, может там что-то есть...

bagas · Непрочитанное сообщение **bagas** » 2011-01-27 17:54:59

Код: Выделить всё

[2011/01/27 20:15:33.168851,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [  933]: request interface version
[2011/01/27 20:15:33.169009,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [  933]: request location of privileged pipe
[2011/01/27 20:15:33.200733,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [  939]: request interface version
[2011/01/27 20:15:33.200996,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [  939]: request location of privileged pipe
[2011/01/27 20:16:07.948229,  3] winbindd/winbindd_cm.c:1633(connection_ok)
  connection_ok: Connection to  for domain MINB is not connected
[2011/01/27 20:16:07.971075,  3] libsmb/cliconnect.c:991(cli_session_setup_spnego)
  Doing spnego session setup (blob length=117)
[2011/01/27 20:16:07.971273,  3] libsmb/cliconnect.c:1020(cli_session_setup_spnego)
  got OID=1.2.840.48018.1.2.2
  got OID=1.2.840.113554.1.2.2
  got OID=1.2.840.113554.1.2.2.3
  got OID=1.3.6.1.4.1.311.2.2.10
[2011/01/27 20:16:07.971310,  3] libsmb/cliconnect.c:1030(cli_session_setup_spnego)
  got principal=s895nt12$@EXAMPLE.RU
[2011/01/27 20:16:08.045918,  2] libsmb/cliconnect.c:795(cli_session_setup_kerberos)
  Doing kerberos session setup
[2011/01/27 20:16:08.083776,  3] libsmb/clikrb5.c:622(ads_cleanup_expired_creds)
  ads_cleanup_expired_creds: Ticket in ccache[MEMORY:cliconnect] expiration Fri, 28 Jan 2011 06:16:07 OMST
[2011/01/27 20:16:16.798185,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1038]: request interface version
[2011/01/27 20:16:16.798344,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1038]: request location of privileged pipe
[2011/01/27 20:16:23.833959,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1041]: request interface version
[2011/01/27 20:16:23.834074,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1041]: request location of privileged pipe
[2011/01/27 20:16:23.834390,  3] winbindd/winbindd_getgrent.c:51(winbindd_getgrent_send)
  [ 1041]: getgrent
[2011/01/27 20:16:23.874861,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1042]: request interface version
[2011/01/27 20:16:23.874972,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1042]: request location of privileged pipe
[2011/01/27 20:16:30.823905,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1043]: request interface version
[2011/01/27 20:16:30.824033,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1043]: request location of privileged pipe
[2011/01/27 20:16:30.824362,  3] winbindd/winbindd_getgrent.c:51(winbindd_getgrent_send)
  [ 1043]: getgrent
[2011/01/27 20:16:34.004201,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1048]: request interface version
[2011/01/27 20:16:34.004333,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1048]: request location of privileged pipe
[2011/01/27 20:16:34.004559,  3] winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send)
  [ 1048]: getpwent
[2011/01/27 20:16:41.333878,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1054]: request interface version
[2011/01/27 20:16:41.334020,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1054]: request location of privileged pipe
[2011/01/27 20:16:41.334245,  3] winbindd/winbindd_misc.c:98(winbindd_list_trusted_domains)
  [ 1054]: list trusted domains
[2011/01/27 20:16:43.806290,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1055]: request interface version
[2011/01/27 20:16:43.806429,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1055]: request location of privileged pipe
[2011/01/27 20:16:43.806663,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1055]: request interface version
[2011/01/27 20:16:43.806763,  3] winbindd/winbindd_misc.c:340(winbindd_info)
  [ 1055]: request misc info
[2011/01/27 20:16:43.806876,  3] winbindd/winbindd_misc.c:373(winbindd_netbios_name)
  [ 1055]: request netbios name
[2011/01/27 20:16:43.806965,  3] winbindd/winbindd_misc.c:362(winbindd_domain_name)
  [ 1055]: request domain name
[2011/01/27 20:16:43.807052,  3] winbindd/winbindd_misc.c:244(winbindd_domain_info)
  [ 1055]: domain_info [MINB]
[2011/01/27 20:18:14.494835,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1057]: request interface version
[2011/01/27 20:18:14.494950,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1057]: request location of privileged pipe
[2011/01/27 20:18:14.495168,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam minb+ad
[2011/01/27 20:18:14.733711,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam MINB+ad
[2011/01/27 20:18:14.734174,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam MINB+AD
[2011/01/27 20:18:14.734500,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam ad
[2011/01/27 20:18:14.734834,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam Ad
[2011/01/27 20:18:14.735165,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam AD
[2011/01/27 20:18:14.738686,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam minb+ad
[2011/01/27 20:18:14.739014,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam MINB+Ad
[2011/01/27 20:18:14.739308,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam MINB+AD
[2011/01/27 20:18:14.739599,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam ad
[2011/01/27 20:18:14.739905,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam Ad
[2011/01/27 20:18:14.740239,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam AD
[2011/01/27 20:18:21.558364,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam minb+ad
[2011/01/27 20:18:21.558690,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam MINB+Ad
[2011/01/27 20:18:21.559042,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam MINB+AD
[2011/01/27 20:18:21.559348,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam ad
[2011/01/27 20:18:21.559640,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam Ad
[2011/01/27 20:18:21.559956,  3] winbindd/winbindd_getpwnam.c:55(winbindd_getpwnam_send)
  getpwnam AD
[2011/01/27 20:19:13.407696,  0] winbindd/winbindd.c:195(winbindd_sig_term_handler)
  Got sig[15] terminate (is_parent=1)
[2011/01/27 20:20:22,  0] winbindd/winbindd.c:1105(main)
  winbindd version 3.5.6 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2010
[2011/01/27 20:20:22.978557,  2] lib/tallocmsg.c:106(register_msg_pool_usage)
  Registered MSG_REQ_POOL_USAGE
[2011/01/27 20:20:22.978606,  2] lib/dmallocmsg.c:77(register_dmalloc_msgs)
  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2011/01/27 20:20:22.978667,  3] param/loadparm.c:9158(lp_load_ex)
  lp_load_ex: refreshing parameters
Initialising global parameters
max_open_files: sysctl_max (11095) below minimum Windows limit (16384)
rlimit_max: rlimit_max (11095) below minimum Windows limit (16384)
[2011/01/27 20:20:22.978821,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file "/usr/local/etc/smb.conf"
[2011/01/27 20:20:22.978897,  3] param/loadparm.c:7842(do_section)
  Processing section "[global]"
[2011/01/27 20:20:22.979521,  2] param/loadparm.c:7859(do_section)
  Processing section "[Share]"
[2011/01/27 20:20:22.979686,  2] param/loadparm.c:7859(do_section)
  Processing section "[FILES]"
[2011/01/27 20:20:22.979776,  0] param/loadparm.c:7617(lp_do_parameter)
  Global parameter null passwords found in service section!
[2011/01/27 20:20:22.980314,  0] param/loadparm.c:7617(lp_do_parameter)
  Global parameter guest account found in service section!
[2011/01/27 20:20:22.989965,  3] param/loadparm.c:6313(lp_add_ipc)
  adding IPC service
[2011/01/27 20:20:22.990242,  2] lib/interface.c:340(add_interface)
  added interface re0 ip=10.7.20.210 bcast=10.7.20.255 netmask=255.255.255.0
[2011/01/27 20:20:22.990381,  2] lib/interface.c:340(add_interface)
  added interface re0 ip=10.7.20.210 bcast=10.7.20.255 netmask=255.255.255.0
[2011/01/27 20:20:23.000877,  0] winbindd/winbindd_cache.c:3076(initialize_winbindd_cache)
  initialize_winbindd_cache: clearing cache and re-creating with version number 1
[2011/01/27 20:20:23.230495,  2] winbindd/winbindd_util.c:221(add_trusted_domain)
  Added domain BUILTIN  S-1-5-32
[2011/01/27 20:20:23.247103,  2] winbindd/winbindd_util.c:221(add_trusted_domain)
  Added domain PAV-210  S-1-5-21-1070866573-1635664073-2207768812
[2011/01/27 20:20:23.247265,  2] winbindd/winbindd_util.c:221(add_trusted_domain)
  Added domain MINB EXAMPLE.RU S-1-5-21-2147295678-525797189-925700815
[2011/01/27 20:20:23.975361,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [  917]: request interface version
[2011/01/27 20:20:23.975572,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [  917]: request location of privileged pipe
[2011/01/27 20:20:24.069853,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [  925]: request interface version
[2011/01/27 20:20:24.069981,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [  925]: request location of privileged pipe
[2011/01/27 20:20:24.125543,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [  927]: request interface version
[2011/01/27 20:20:24.125728,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [  927]: request location of privileged pipe
[2011/01/27 20:20:24.141879,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [  929]: request interface version
[2011/01/27 20:20:24.142011,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [  929]: request location of privileged pipe
[2011/01/27 20:20:24.152276,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [  931]: request interface version
[2011/01/27 20:20:24.152419,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [  931]: request location of privileged pipe
[2011/01/27 20:20:24.184160,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [  937]: request interface version
[2011/01/27 20:20:24.184369,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [  937]: request location of privileged pipe
[2011/01/27 20:20:24.905409,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1029]: request interface version
[2011/01/27 20:20:24.905551,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1029]: request location of privileged pipe
[2011/01/27 20:20:44.197901,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1036]: request interface version
[2011/01/27 20:20:44.198043,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1036]: request location of privileged pipe
[2011/01/27 20:20:44.198371,  3] winbindd/winbindd_getgrent.c:51(winbindd_getgrent_send)
  [ 1036]: getgrent
[2011/01/27 20:20:44.238772,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1037]: request interface version
[2011/01/27 20:20:44.238885,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1037]: request location of privileged pipe
[2011/01/27 20:20:48.088297,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1038]: request interface version
[2011/01/27 20:20:48.088424,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1038]: request location of privileged pipe
[2011/01/27 20:20:48.088773,  3] winbindd/winbindd_getgrent.c:51(winbindd_getgrent_send)
  [ 1038]: getgrent
[2011/01/27 20:20:58.799978,  3] winbindd/winbindd_cm.c:1633(connection_ok)
  connection_ok: Connection to  for domain MINB is not connected
[2011/01/27 20:20:58.823744,  3] libsmb/cliconnect.c:991(cli_session_setup_spnego)
  Doing spnego session setup (blob length=117)
[2011/01/27 20:20:58.823874,  3] libsmb/cliconnect.c:1020(cli_session_setup_spnego)
  got OID=1.2.840.48018.1.2.2
  got OID=1.2.840.113554.1.2.2
  got OID=1.2.840.113554.1.2.2.3
  got OID=1.3.6.1.4.1.311.2.2.10
[2011/01/27 20:20:58.823907,  3] libsmb/cliconnect.c:1030(cli_session_setup_spnego)
  got principal=s895nt12$@EXAMPLE.RU
[2011/01/27 20:20:58.900567,  2] libsmb/cliconnect.c:795(cli_session_setup_kerberos)
  Doing kerberos session setup
[2011/01/27 20:20:58.930162,  3] libsmb/clikrb5.c:622(ads_cleanup_expired_creds)
  ads_cleanup_expired_creds: Ticket in ccache[MEMORY:cliconnect] expiration Fri, 28 Jan 2011 06:20:58 OMST
[2011/01/27 20:21:39.355657,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1052]: request interface version
[2011/01/27 20:21:39.355798,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1052]: request location of privileged pipe
[2011/01/27 20:21:39.356019,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1052]: request interface version
[2011/01/27 20:21:39.356118,  3] winbindd/winbindd_misc.c:340(winbindd_info)
  [ 1052]: request misc info
[2011/01/27 20:21:39.356231,  3] winbindd/winbindd_misc.c:373(winbindd_netbios_name)
  [ 1052]: request netbios name
[2011/01/27 20:21:39.356323,  3] winbindd/winbindd_misc.c:362(winbindd_domain_name)
  [ 1052]: request domain name
[2011/01/27 20:21:39.356406,  3] winbindd/winbindd_misc.c:244(winbindd_domain_info)
  [ 1052]: domain_info [MINB]
[2011/01/27 20:21:41.446504,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1053]: request interface version
[2011/01/27 20:21:41.446644,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1053]: request location of privileged pipe
[2011/01/27 20:21:41.446875,  3] winbindd/winbindd_misc.c:98(winbindd_list_trusted_domains)
  [ 1053]: list trusted domains
[2011/01/27 20:21:43.595477,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1054]: request interface version
[2011/01/27 20:21:43.595618,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1054]: request location of privileged pipe
[2011/01/27 20:21:43.595839,  3] winbindd/winbindd_list_users.c:58(winbindd_list_users_send)
  list_users
[2011/01/27 20:21:51.723241,  1] ../librpc/ndr/ndr.c:395(ndr_pull_error)
  ndr_pull_error(1): String terminator not present or outside string boundaries
[2011/01/27 20:21:57.081339,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1057]: request interface version
[2011/01/27 20:21:57.081474,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1057]: request location of privileged pipe
[2011/01/27 20:21:57.081697,  3] winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send)
  [ 1057]: getpwent
[2011/01/27 20:22:02.196830,  3] winbindd/winbindd_misc.c:352(winbindd_interface_version)
  [ 1059]: request interface version
[2011/01/27 20:22:02.196946,  3] winbindd/winbindd_misc.c:385(winbindd_priv_pipe_dir)
  [ 1059]: request location of privileged pipe
[2011/01/27 20:22:02.197281,  3] winbindd/winbindd_getgrent.c:51(winbindd_getgrent_send)
  [ 1059]: getgrent
pav-210#

bagas · Непрочитанное сообщение **bagas** » 2011-01-28 11:13:03

такс разобрался я с проблемой просмотра списка пользователей доменных

Код: Выделить всё

        dos charset = cp866
        unix charset = utf8 #koi8-r
        display charset = utf8 #koi8-r

но меня это не устраивает...тогда кирилица отображаеться крокозяблами

snorlov · Непрочитанное сообщение **snorlov** » 2011-01-28 12:09:49

Однозначно версия самбы

Код: Выделить всё

[2011/01/27 20:21:51.723241,  1] ../librpc/ndr/ndr.c:395(ndr_pull_error)
  ndr_pull_error(1): String terminator not present or outside string boundaries

Arhimed · Непрочитанное сообщение **Arhimed** » 2011-03-28 21:49:18

Вроде исправили в версии 3.5.8
Changes since 3.5.7:
o Michael Adam <obnox@samba.org>
* BUG 7594: Fix "log=>ndr_pull_error" in 'wbinfo -u' and 'wbinfo -g'.
* BUG 7871: Fix 'net ads dns register' in cluster setups.
* BUG 7894: Fix sporadic Winbind panic in rpc query_user_list.

forum.lissyara.su

Несколкьо вопросов по sambe 3.5 d AD

Несколкьо вопросов по sambe 3.5 d AD

Услуги хостинговой компании Host-Food.ru

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 в AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD

Re: Несколкьо вопросов по sambe 3.5 d AD