LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)
-   -   Winbind losing connectivity with Active Directory (https://www.linuxquestions.org/questions/linux-server-73/winbind-losing-connectivity-with-active-directory-4175465893/)

theace18 06-13-2013 01:41 PM

Winbind losing connectivity with Active Directory
 
Hey Everyone,

I am trying to get AD authentication to work with my CentOS 5 and CentOS 6 servers. It will join the domain fine. I can run test joins, display all the AD users, AD groups, etc just fine. Then like 2-3 hours later it will just stop working. The log.winbindd and log-wb-DOMAINNAME logs show nothing. I am completely stumped and not sure where to even begin. I have tried different domain controllers, and it all does the same thing. I've been beating my head on the table on this for the last 4 days.

Any assistance would be GREATLY appreciated. Let me know what you need me to post, and I will do it. Thanks!

vishesh 06-14-2013 06:06 AM

Can you please send us output of testparm -v command

Thanks

theace18 06-14-2013 10:28 AM

2 Attachment(s)
Ran the command on my CentOS 5 server. This is what I got:

Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (8192) to minimum Windows limit (16384)
WARNING: The "idmap uid" option is deprecated
WARNING: The "idmap gid" option is deprecated
Loaded services file OK.
WARNING: The setting 'security=ads' should NOT be combined with the 'password server' parameter.
(by default Samba will discover the correct DC to contact automatically).
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions


Ran the command on my CentOS 6 server and this is what I got:

Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Loaded services file OK.
WARNING: The setting 'security=ads' should NOT be combined with the 'password server' parameter.
(by default Samba will discover the correct DC to contact automatically).
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions


I have posted the outputs of the command as text files, since the out put of each was 300+ lines.

Thanks!

vishesh 06-17-2013 07:23 AM

By observing attached testparm file, I can say when cache expires , It stops working

Quote:

idmap cache time = 604800
Thanks


All times are GMT -5. The time now is 04:54 PM.