我目前正在设置winbind / samba并遇到一些问题.
我可以用wbinfo测试连接:
[root@buildmirror ~]# wbinfo -u hostname username administrator guest krbtgt username [root@buildmirror ~]# wbinfo -a username%password plaintext password authentication succeeded challenge/response password authentication succeeded
但是,当我做一个getent我没有得到任何AD帐户返回
[root@buildmirror ~]# getent passwd root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin puppet:x:52:52:Puppet:/var/lib/puppet:/sbin/nologin
我的nsswitch看起来像这样:
passwd: files winbind shadow: files winbind group: files winbind #hosts: db files nisplus nis dns hosts: files dns
我肯定加入了域名:
[root@buildmirror ~]# net ads info LDAP server: 192.168.4.4 LDAP server name: pdc.domain.local Realm: domain.local Bind Path: dc=DOMAIN,dc=LOCAL LDAP port: 389 Server time: Sun,05 Aug 2012 17:11:27 BST KDC server: 192.168.4.4 Server time offset: -1
那么我错过了什么?
解决方法
在/etc/samba/smb.conf中有以下几行吗?
winbind enum users = yes winbind enum groups = yes