Возникла такая проблема.. Машина входит в домен, была авторизация через доменного пользователя и вдруг неожиданно машина выпала из домена.
wdinfo -u нормально показывает доменных пользователей.
getent passwd показывает только локальных пользователей.
конфиг smb.conf на домене
cat /etc/samba/smb.conf
[global]
workgroup = SMARKET
security = user
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
interfaces = lo eth0
passdb backend = tdbsam
local master = yes
domain master = yes
preferred master = yes
domain logons = yes
logon path =\\%L\Profiles\%U
admin users = admin Administrator root
wins support = yes
name resolve order = wins lmhosts bcast
add user sсript = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -m %u
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind separator = +
winbind cache time = 10
template homedir = /home/%D/%U
template shell = /bin/bash
#guest account = samp
# -------------------------------------
[netlogon]
comment = Network Login Service
path = /var/samba/netlogon
writable = no
guest ok = yes
write list = admin, administrator, root
#--------------------------------------
[homes]
comment=Home Directories
browsable = no
writable = yes
#--------------------------------------
[Profiles]
path = /var/samba/profiles
browseable = no
create mask = 0600
directory mask = 0700
конфиг smb.conf на хосте
cat /etc/samba/smb.conf
[global]
workgroup = SMARKET
security = domain
idmap config * : range = 16777216-33554431
template shell = /bin/bash
kerberos method = secrets only
winbind use default domain = false
winbind offline logon = false
server string = Samba Server Version %v
netbios name = sysadmin
log file = /var/log/samba/log.%m
max log size = 50
passdb backend = tdbsam
map to guest = bad user
winbind enum users = yes
winbind enum groups =yes
domain master = no
domain logons = no
local master = no
preferred master = no
wins server = samba
load printers = yes
cups options = raw
[homes]
comment = Home Directories
browseable = no
writable = yes
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
writable = no
printable = yes
конфиг был скопирован с хоста у которого нет такой проблемы с авторизацией.
systemctl status winbind выдает следующее: