-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The net commands work: net ads testjoin, net ads user (after a ticket is created). However, winbindd refuses to run correctly. It has an --set-auth-user configured, but the following commands don't work: [root@nassc01 samba]# wbinfo -p Ping to winbindd failed on fd -1 could not ping winbindd! [root@nassc01 samba]# wbinfo -t checking the trust secret via RPC calls failed error code was (0x0) Could not check secret The winbindd logs contain things like: [2005/10/12 15:16:13, 1] libsmb/clikrb5.c:ads_krb5_mk_req(388) ~ ads_krb5_mk_req: krb5_get_credentials failed for ntpa01$@IBGE-PA.IBGE.GOV.BR (Cannot find KDC for requested realm) [2005/10/12 15:16:13, 1] nsswitch/winbindd_ads.c:ads_cached_connection(80) ~ ads_connect for domain IBGE-PA failed: Cannot find KDC for requested realm [2005/10/12 15:16:20, 1] libsmb/clikrb5.c:ads_krb5_mk_req(388) ~ ads_krb5_mk_req: krb5_get_credentials failed for ntpb01$@IBGE-PB.IBGE.GOV.BR (Cannot find KDC for requested realm) [2005/10/12 15:16:20, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(539) ~ spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm which are other realms. The winbindd processes are running, but wbinfo -p doesn't work. The times are synched correctly. This is samba version 3.0.14a; it would be difficult to upgrade but doable if that would resolve the issue. - -tom -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFDTUXq2dxAfYNwANIRAuOcAKCC4zd3DFCUaWMtj/3x82J9nz8eDQCeLr6c PleLDfSxd9mJ1KV/s4xhYlQ=2vrN -----END PGP SIGNATURE-----