Hi Daniel, You may wish to have: winbind enum users = yes winbind enum groups = yes in your smb.conf. I think this will allow you to use getent to list users and groups. Here's the reference I am looking at: <a href="http://us5.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html#id2609582">http://us5.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html#id2609582</a> I hope this helps. John <div>On 11/16/06, Daniel Kuecker <<a href="mailto:kueckerd@shenandoah.k12.ia.us">kueckerd@shenandoah.k12.ia.us</a>> wrote:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> thanks for your help, btw! this is the response for requesting the ticket: [root@hsthin ~]# kinit kinit(v5): Client not found in Kerberos database while getting initial credentials [root@hsthin ~]# cat /etc/samba/smb.conf [global] workgroup = SHEN server string = Samba Server printcap name = /etc/printcap load printers = yes log file = /var/log/samba/%m.log max log size = 50 security = ads socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = no idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 template shell = /bin/bash winbind use default domain = yes password server = thor.shen.local realm = SHEN.LOCAL wins server = thor.shen.local template homedir = /home/%U logon home = 192.168.0.11\%u Thank you, Daniel Kuecker Technology Coordinator Shenandoah Community Schools (712) 246-1581 >>> "john " <<a href="mailto:lists.john@gmail.com">lists.john@gmail.com</a>> 11/16/06 3:36 PM >>> Go ahead and request a new ticket as outline in the Ubuntu howto I passed along. Make sure to list your domain in ALL CAPS. Also can you post your smb.conf file? John On 11/16/06, Daniel Kuecker <<a href="mailto:kueckerd@shenandoah.k12.ia.us">kueckerd@shenandoah.k12.ia.us </a>> wrote: > > it shows the following: > > [root@hsthin ~]# wbinfo - g > BUILTIN\administrators > BUILTIN\users > Domain Computers > Domain Controllers > Schema Admins > Enterprise Admins > Domain Admins > Domain Users > Domain Guests > Group Policy Creator Owners > DnsUpdateProxy > Staff > Students > food > 8gradecomp > > > [root@hsthin ~]# wbinfo - u | more > 14guylynn > angerothm > 10shelzach > 13garcsaul > 12dunnkend > 09jackmich > 09thedbrys > 16laturobe > hastingst > 16balddill > 10poeryan > 15studkins > > > i am looking at that page now. > also when i do kinit user i get the following: > > [root@hsthin ~]# kinit public > kinit(v5): Cannot resolve network address for KDC in requested realm > while getting initial credentials > > > > > Thank you, > > Daniel Kuecker > Technology Coordinator > Shenandoah Community Schools > (712) 246- 1581 > > > > >>> "john " <<a href="mailto:lists.john@gmail.com">lists.john@gmail.com</a>> 11/16/06 2:28 PM >>> > What does wbinfo - u and wbinfo - g show you? Also before you can > getent - u > or - g you'll need to have a valid kerberos ticket. Take a look at > this and > see if this helps: > > <a href="https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto"> https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto</a> > > John > > On 11/16/06, Daniel Kuecker <<a href="mailto:kueckerd@shenandoah.k12.ia.us">kueckerd@shenandoah.k12.ia.us</a>> wrote: > > > > I just noticed that when i do a getent passwd, it only shows the > local > > unix users, and not the win2k3 ads users. any suggestions? > > > > > > > > Thank you, > > > > Daniel Kuecker > > Technology Coordinator > > Shenandoah Community Schools > > (712) 246- 1581 > > > > > > > > >>> "Daniel Kuecker" < <a href="mailto:kueckerd@shenandoah.k12.ia.us">kueckerd@shenandoah.k12.ia.us</a>> 11/16/06 10:40 > AM > > >>> > > > > Hello all! > > I have a wierd problem I cannot figure out. I have k12ltsp 5 running > > with user authentication from a win2k3 server. there are no local > user > > accounts (except the initial one i created). I then setup the > > pam_mount > > to mount the windows home dir to mount to a folder under > /home/user/X: > > everything seems to work fine, however, when accessing the the > windows > > share, the permissions show as owner=uucp group=wheel. the user > cannot > > access the share. if i list the /home/user/X: folder as root, it > list > > the permissions as owner=user group="bunch of numbers". i followed > the > > instructions from the following site. please help, the students at > my > > school do not want to use the thin client because they cannot access > > the > > windows home folder. > > > > <a href="http://math.univ-">http://math.univ-</a> <a href="http://lille1.fr/~hafidi/terminal-">lille1.fr/~hafidi/terminal-</a> > > services/authentication_and_homedirs_on_windows.html > > > > > > > > > > > > Thank you, > > > > Daniel Kuecker > > Technology Coordinator > > Shenandoah Community Schools > > (712) 246- 1581 > > > > > > _______________________________________________ > > K12OSN mailing list > > <a href="mailto:K12OSN@redhat.com">K12OSN@redhat.com</a> > > <a href="https://www.redhat.com/mailman/listinfo/k12osn"> https://www.redhat.com/mailman/listinfo/k12osn</a> > > For more info see <<a href="http://www.k12os.org">http://www.k12os.org</a>> > > > > _______________________________________________ > > K12OSN mailing list > > <a href="mailto:K12OSN@redhat.com">K12OSN@redhat.com</a> > > <a href="https://www.redhat.com/mailman/listinfo/k12osn">https://www.redhat.com/mailman/listinfo/k12osn</a> > > For more info see <<a href="http://www.k12os.org">http://www.k12os.org</a>> > > > > _______________________________________________ > K12OSN mailing list > <a href="mailto:K12OSN@redhat.com"> K12OSN@redhat.com</a> > <a href="https://www.redhat.com/mailman/listinfo/k12osn">https://www.redhat.com/mailman/listinfo/k12osn</a> > For more info see <<a href="http://www.k12os.org">http://www.k12os.org</a> > > _______________________________________________ K12OSN mailing list <a href="mailto:K12OSN@redhat.com">K12OSN@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/k12osn">https://www.redhat.com/mailman/listinfo/k12osn </a> For more info see <<a href="http://www.k12os.org">http://www.k12os.org</a>> </blockquote></div>