You are not logged in.

#1 2014-02-01 14:00:37

ReiserFS
Member
Registered: 2014-02-01
Posts: 57

join linux client to samba domain

I've followed instructions regarding integration with Active Directory on wiki and successfully joined to the domain. wbinfo gives the list of users and groups and everything works as expected. Users can login but nm-applet dont work. My log is:

Feb 01 17:14:12 localhost lxdm-session[10923]: pam_unix(lxdm:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=  user=user5
Feb 01 17:14:13 localhost lxdm-session[10923]: pam_unix(lxdm:session): session opened for user user5 by (uid=0)
Feb 01 17:14:13 localhost kernel: lxpolkit[10968]: segfault at 8 ip 080497f1 sp bfc14e40 error 4 in lxpolkit[8048000+3000]
Feb 01 17:14:13 localhost systemd-coredump[10979]: Process 10968 (lxpolkit) dumped core.
Feb 01 17:14:14 localhost dbus-daemon[172]: dbus[172]: [system] Rejected send message, 2 matched rules; type="method_call", sender=":1.295" (uid=70006 pid=10965 comm="nm-applet ") interface="org.freedesktop.DBus.Properties" member="GetAll" error name="(unset)" requested_reply="0" destination="org.freedesktop.NetworkManager" (uid=0 pid=170 comm="/usr/bin/NetworkManager --no-daemon ")
Feb 01 17:14:15 localhost dbus-daemon[172]: dbus[172]: [system] Rejected send message, 2 matched rules; type="method_call", sender=":1.295" (uid=70006 pid=10965 comm="nm-applet ") interface="org.freedesktop.NetworkManager.Settings.Connection" member="GetSettings" error name="(unset)" requested_reply="0" destination="org.freedesktop.NetworkManager" (uid=0 pid=170 comm="/usr/bin/NetworkManager --no-daemon ")
Feb 01 17:14:15 localhost dbus-daemon[172]: dbus[172]: [system] Rejected send message, 2 matched rules; type="method_call", sender=":1.295" (uid=70006 pid=10965 comm="nm-applet ") interface="org.freedesktop.NetworkManager.Settings.Connection" member="GetSettings" error name="(unset)" requested_reply="0" destination="org.freedesktop.NetworkManager" (uid=0 pid=170 comm="/usr/bin/NetworkManager --no-daemon ")
Feb 01 17:14:14 localhost dbus[172]: [system] Rejected send message, 2 matched rules; type="method_call", sender=":1.295" (uid=70006 pid=10965 comm="nm-applet ") interface="org.freedesktop.DBus.Properties" member="GetAll" error name="(unset)" requested_reply="0" destination="org.freedesktop.NetworkManager" (uid=0 pid=170 comm="/usr/bin/NetworkManager --no-daemon ")
Feb 01 17:14:14 localhost dbus[172]: [system] Rejected send message, 2 matched rules; type="method_call", sender=":1.295" (uid=70006 pid=10965 comm="nm-applet ") interface="org.freedesktop.NetworkManager.Settings.Connection" member="GetSettings" error name="(unset)" requested_reply="0" destination="org.freedesktop.NetworkManager" (uid=0 pid=170 comm="/usr/bin/NetworkManager --no-daemon ")
Feb 01 17:14:14 localhost dbus[172]: [system] Rejected send message, 2 matched rules; type="method_call", sender=":1.295" (uid=70006 pid=10965 comm="nm-applet ") interface="org.freedesktop.NetworkManager.Settings.Connection" member="GetSettings" error name="(unset)" requested_reply="0" destination="org.freedesktop.NetworkManager" (uid=0 pid=170 comm="/usr/bin/NetworkManager --no-daemon ")

/etc/pam.d/system-auth

#%PAM-1.0

auth      required  pam_env.so
auth      sufficient  pam_unix.so     try_first_pass nullok
auth      required  pam_winbind.so use_first_pass use_authtok
auth      optional  pam_permit.so
 
account   sufficient  pam_unix.so
account   sufficient  pam_winbind.so use_first_pass use_authtok
account   optional  pam_permit.so
account   required  pam_time.so
   
password  sufficient  pam_unix.so     try_first_pass nullok sha512 shadow
password  sufficient  pam_winbind.so use_first_pass use_authtok
password  optional  pam_permit.so
   
session   required  pam_mkhomedir.so skel=/etc/skel/ umask=0022
session   required  pam_limits.so
session   required  pam_env.so
session   sufficient  pam_unix.so
session   sufficient  pam_winbind.so use_first_pass use_authtok
session   optional  pam_permit.so

/etc/samba/smb.conf

security = domain
netbios name = myarchlinux
workgroup = DOMSMB
winbind use default domain = yes
template shell = /bin/bash
template homedir = /home/%D/%U
domain master = no
winbind enum users = yes
winbind enum groups = yes
add machine script = /usr/sbin/useradd -s /bin/false -g 515 -M %u
encrypt passwords = yes
disable spoolss = yes
winbind separator = +
idmap config *:range = 70001-80000
idmap config *:backend = tdb

join command:

net rpc join -U root

lxde desktop

Can you help me?

Last edited by ReiserFS (2014-02-03 18:43:44)

Offline

#2 2014-02-01 14:48:57

karol
Archivist
Registered: 2009-05-06
Posts: 25,440

Re: join linux client to samba domain

When posting configs, code or command output, please use [ code ] tags, not [ quote ] tags https://bbs.archlinux.org/help.php#bbcode

like this

It makes the code more readable and - in case of longer listings - more convenient to scroll through.

Offline

#3 2014-02-01 17:50:10

ReiserFS
Member
Registered: 2014-02-01
Posts: 57

Re: join linux client to samba domain

karol wrote:

When posting configs, code or command output, please use [ code ] tags, not [ quote ] tags https://bbs.archlinux.org/help.php#bbcode

like this

It makes the code more readable and - in case of longer listings - more convenient to scroll through.

OK. Thank you

Offline

#4 2014-02-02 19:19:53

ReiserFS
Member
Registered: 2014-02-01
Posts: 57

Re: join linux client to samba domain

Bump

Offline

#5 2014-02-04 19:48:18

ReiserFS
Member
Registered: 2014-02-01
Posts: 57

Re: join linux client to samba domain

can anyone help me please ! ?

Last edited by ReiserFS (2014-02-04 19:50:59)

Offline

#6 2014-02-04 20:13:30

nomorewindows
Member
Registered: 2010-04-03
Posts: 3,548

Re: join linux client to samba domain

Doesn't that have to be done from the domain controller or instigated from the PDC?


I may have to CONSOLE you about your usage of ridiculously easy graphical interfaces...
Look ma, no mouse.

Offline

#7 2014-02-05 17:18:54

ReiserFS
Member
Registered: 2014-02-01
Posts: 57

Re: join linux client to samba domain

changing

session   sufficient  pam_unix.so

to

session   required  pam_unix.so

solved the problem.

Offline

Board footer

Powered by FluxBB