samba and winbind problem

[hiker_42]

I am on the edge of making winbind work with samba. I have successfully joined the domain. I can retrieve the list of shares via the wbinfo command. I can also authenticate users using this command. I can successfully pull the list of users as well as groups. However, I still cannot "map" to these shares via linux or Windows NT/2K. I have enabled plain text passwords on the Windows side. When I try to connect via smbclient I get the error:

tree connect failed: NT_STATUS_WRONG_PASSWORD

I am so close with one last hurdle to conquer. Anyone have any thoughts. Thanks in advance!

Here is my smb.conf file:


# Samba config file created using SWAT
# from localhost.localdomain (127.0.0.1)
# Date: 2002/07/05 14:12:15

# Global parameters
[global]

winbind uid = 10000-20000
winbind gid = 10000-20000
winbind cache = 30
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/%D/%U
template shell = /bin/bash

security = domain
workgroup = "domain"
password server = *
encrypt passwords = yes

netbios name = RedHat1
server string = Samba Server
obey pam restrictions = yes
pam password change = No
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*success fully*
unix password sync = YES
log file = /var/log/samba/%U.log
max log size = 0
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
os level = 0
preferred master = False
local master = No
domain master = False
dns proxy = No
remote announce = 172.16.77.4
guest account = guest
hosts allow = 192.168.1. 127.
printing = nt
map to guest = Bad User

[homes]
path = /home/%D/%U
valid users = %S
read only = No
create mask = 0777
directory mask = 0777
browseable = No

[public]
path = /home/public
valid users = %S
read only = No
create mask = 0777
browseable = Yes

[test]
path = /test
read only = no
create mask = 0777
directory mask = 0777
browseable = yes
guest ok = no
valid users = @"Domain"\Domain Users

[hiker_42]

OK...I got it working! The problem was in the "Valid Users" line.
I still have one question though: if I put "Valid Users = @Domain+Domain Users" the mapping does not work. The log file says it could not find that group. If I put "Valid users = Domain+username it DOES work. Also if I do a wbinfo -r on a user it returns a number i.e 10000 instead of a group name. Is this normal? I would expect Domain Admins or Domain Users....

Any help would be greatly appreciated!

[hiker_42]

Alright, I figured out the problem. Now if someone can tell me how to fix it. The problem is that when I use "Valid Users = Domain+Domain Users" it drops the "users" part of the group name, thinking that I am declaring another permission. SO how do you name a group with two words? I used single word groups and it worked fine. How can I use "Domain Admins" and "Domain Users" as groups?

[busa_blade]

Try using double quotes around the words like you did in your post. :) Let me know if it works.

[hiker_42]

That worked! Thank you very much!