Comments on: FreeBSD Users and Groups with Samba (Winbind) and Active Directory

By: zblk

zblk — Fri, 06 Mar 2009 09:57:16 +0000

Debian Lenny with Samba 3.2.5
with “old” idmap syntax winbind generates errors about re-initialization of rid module:

[2009/03/06 12:07:48, 0] winbindd/idmap.c:smb_register_idmap(142)
Idmap module rid already registered!
[2009/03/06 12:07:48, 0] lib/module.c:do_smb_load_module(69)
Module ‘/usr/lib/samba/idmap/rid.so’ initialization failed: NT_STATUS_OBJECT_NAME_COLLISION

after changing it to “new” syntax errors have gone

was:
…
idmap backend = rid:DOMAIN=10000-20000
idmap uid = 10000-20000
idmap gid = 10000-20000
…

become:
…
idmap domains = DOMAIN
idmap config DOMAIN:backend = rid
idmap config DOMAIN:range = 10000-20000
…

By: Aberardo Castillo

Aberardo Castillo — Fri, 14 Nov 2008 01:41:37 +0000

Hi,

I did apply this procedure and everything works fine. Thanks for your contribution to others.

I have a case in my Lab. I have 2 AD in redundancy, and I would like to configure the server so it can authenticate the users with any of them (have redundancy as well on the authentication). is this possible? if yes, any clues or ideas to get it done?

Regards,
–Aberardo.

By: suresh

suresh — Thu, 13 Nov 2008 09:48:18 +0000

Actually i am tester i dont know any thing about this , i am trying to do
cifs mounting in freebsd but i am getting any thing about that please help me.

By: Joseph Scott

Joseph Scott — Wed, 12 Nov 2008 17:54:35 +0000

@suresh -

Looks like there was an error in building samba3 at some point. I’d suggest tracking that down before trying to go any further.

By: suresh

suresh — Sat, 08 Nov 2008 09:44:44 +0000

After editing /etc/make.conf file i did make install bug i am getting below message

Stop in /usr/ports/net/samba3.
*** Error code 1

Stop in /usr/ports/net/samba3.
[root@freebsd61 /usr/ports/net/samba3]# pwd
/usr/ports/net/samba3
[root@freebsd61 /usr/por

I am trying to install smbclient in freebsd6.1

By: Jim Dillon

Jim Dillon — Fri, 10 Oct 2008 20:47:33 +0000

Followed this tutorial and ran into a small problem, not with the tutorial, but with my environment. It seems that for ssh to work the user can’t be in more than 15 Active Directory groups. I was getting something like
[sshd] initgroups(username, guid): Invalid argument. If you experience this issue get your AD group membership down to 15 and you should be just fine.

Thanks for the wonderful tutorial!

By: Joel Duckworth

Joel Duckworth — Thu, 17 Apr 2008 05:52:13 +0000

Thanks Chris, I’ve been searching for ages trying to get to the bottom of these errors, there isn’t much info on the net

By: John

John — Fri, 22 Feb 2008 22:10:11 +0000

Thanks for that tip Chris! I’ve been trying to solve this winbind/rid problem for several days on RedHat ES 5.1 which comes with samba 3.0.25b. Thankfully googling the NT_STATUS_OBJECT_NAME_COLLISION error from winbindd-idmap.log led me to your post.

By: Jeremy

Jeremy — Thu, 21 Jun 2007 13:40:29 +0000

@Chris, it sure saved me some time, thanks!!!

By: Chris

Chris — Sat, 02 Jun 2007 06:43:11 +0000

Ugh…just updated to latest samba (samba-3.0.25,1) and there are subtle issues with the config. I think it’s *supposed* to support the config given here, but it doesn’t work.

I was getting all kinds of errors, but the one that tipped me off was found in /var/log/samba/log.winbindd-idmap:

[2007/06/01 23:32:09, 1] nsswitch/idmap.c:idmap_init(343)
Initializing idmap domains
[2007/06/01 23:32:09, 1] nsswitch/idmap_rid.c:idmap_rid_initialize(69)
ERROR: Invalid configuration, ID range missing
[2007/06/01 23:32:09, 0] nsswitch/idmap.c:idmap_init(438)
ERROR: Initialization failed for backend rid (domain default domain), deferred!
[2007/06/01 23:32:09, 0] nsswitch/idmap.c:smb_register_idmap(129)
Idmap module rid already registered!
[2007/06/01 23:32:09, 0] lib/module.c:do_smb_load_module(69)
Module ‘/usr/local/lib/samba/idmap/rid.so’ initialization failed: NT_STATUS_OBJECT_NAME_COLLISION

Now, there are lots of dead-ends to google for there. It turns out that there’s been a change recently in the way to configure idmaps, and even though man smb.conf seems to say the old config syntax is valid, I had to change to the new syntax:

#
# OLD WAY
#
#idmap backend = rid:DOMAIN_NAME=10000-20000

#
# NEW WAY
#
idmap domains = DOMAIN_NAME
idmap config DOMAIN_NAME:backend = rid
idmap config DOMAIN_NAME:range = 10000-20000

Hopefully I’ve saved someone some time by posting this here.