Winbind sur Domain Nt ne marche pas

Bonjour,

J'ai un gros probl=C3=A8me avec Winbind :
Ma machine est configur=C3=A9e en tant serveur d'un domaine NT, voici mon=20
fichier de conf :
# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2007/09/03 11:54:30

[global]
workgroup =3D D15490102
server string =3D %h server
security =3D DOMAIN
password server =3D w15490101abc soft154901
passdb backend =3D tdbsam
passwd program =3D /usr/bin/passwd %u
passwd chat =3D *Enter\snew\sUNIX\spassword:* %n\n=20
*Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .
log level =3D 3
syslog =3D 0
log file =3D /var/log/samba/log.%m
max log size =3D 1000
name resolve order =3D lmhosts host bcast
server signing =3D auto
load printers =3D No
preferred master =3D No
domain master =3D No
ldap ssl =3D no
panic action =3D /usr/share/samba/panic-action %d
host msdfs =3D No
idmap uid =3D 10000-10500
idmap gid =3D 20000-20500
winbind enum users =3D Yes
winbind enum groups =3D Yes
winbind use default domain =3D Yes
winbind trusted domains only =3D Yes
invalid users =3D root
strict locking =3D No

[homes]
comment =3D Home Directories
valid users =3D %S
create mask =3D 0700
directory mask =3D 0700

[printers]
comment =3D All Printers
path =3D /var/spool/samba
create mask =3D 0700
printable =3D Yes
browseable =3D No

[print$]
comment =3D Printer Drivers
path =3D /var/lib/samba/printers

[Download]
comment =3D Download
path =3D /home/lebreton/download
guest ok =3D Yes

j'ai fait un "net rpc join -U administrateur"
la r=C3=A9ponse est OK
J'ai v=C3=A9rifier avec un "net rpc testjoin"
toujours OK
par contre un "wbinfo -u" me r=C3=A9pond : Error looking up domain users
De m=C3=AAme pour wbinfo -g
dans les logs il y des chose bizarres qui font r=C3=A9f=C3=A9rence =C3=A0=
Active=20
Directory :
dans le fichier wb.D15490102 il y a :
ads_sasl_spnego_bind: got server principal name=20
=3Dw15490101abc$@D15490102.CTI-PAYSLOIRE.CNAMTS.FR
[2007/09/03 12:24:32, 3] libsmb/clikrb5.c:ads_krb5_mk_req(552)
ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache=
found)
[2007/09/03 12:24:32, 0] libads/kerberos.c:ads_kinit_password(208)
kerberos_kinit_password=20
LEBRETON-00227$@D15490102.CTI-PAYSLOIRE.CNAMTS.FR failed: Cannot resolve=20
network address for KDC in requested realm
[2007/09/03 12:24:32, 1] nsswitch/winbindd_ads.c:ads_cached_connection(114)
ads_connect for domain D15490102 failed: Cannot resolve network=20
address for KDC in requested realm
[2007/09/03 12:26:05, 3]=20
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth(1115)
[ 9236]: dual pam auth root
[2007/09/03 12:26:05, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
rpc_pipe_bind: Remote machine SOFT154901 pipe \NETLOGON fnum 0x400d=20
bind request returned ok.
[2007/09/03 12:26:05, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
rpc_pipe_bind: Remote machine SOFT154901 pipe \NETLOGON fnum 0x800f=20
bind request returned ok.
[2007/09/03 12:26:05, 2]=20
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth(1290)
Plain-text authentication for user root returned=20
NT_STATUS_NO_SUCH_USER (PAM: 10)
[2007/09/03 12:26:26, 3]=20
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth(1115)
[ 9236]: dual pam auth root
[2007/09/03 12:26:26, 2]=20
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth(1290)
Plain-text authentication for user root returned=20
NT_STATUS_NO_SUCH_USER (PAM: 10)


Pourquoi kerberos?

Quelqu'un a-t-il une id=C3=A9e?

Merci

Philippe LEBRETON
=20

--=20
LEBRETON Philippe=20
CTI Bretagne - Pays de Loire
Service Logistique
02 41 47 77 29=20


"Le contenu de ce courriel et ses =C3=A9ventuelles pi=C3=A8ces jointes sont=
confidentiels. Ils s=E2=80=99adressent exclusivement =C3=A0 la personne=
destinataire.
Si cet envoi ne vous est pas destin=C3=A9, ou si vous l=E2=80=99avez re=C3=
=A7u par erreur,et afin de ne pas violer le secret des correspondances,=
vous ne devez pas le transmettre =C3=A0 d=E2=80=99autres personnes ni le=
reproduire. Merci de le renvoyer =C3=A0 l=E2=80=99=C3=A9metteur et de le d=
=C3=A9truire.

Attention : L=E2=80=99Organisme de l'=C3=A9metteur du message ne pourra =C3=
=AAtre tenu responsable de l=E2=80=99alt=C3=A9ration du pr=C3=A9sent=
courriel. Il appartient au destinataire de v=C3=A9rifier que les messages=
et pi=C3=A8ces jointes re=C3=A7us ne contiennent pas de virus.
Les opinions contenues dans ce courriel et ses =C3=A9ventuelles pi=C3=A8ces=
jointes sont celles de l=E2=80=99=C3=A9metteur. Elles ne refl=C3=A8tent=
pas la position de l=E2=80=99Organisme sauf s=E2=80=99il en est dispos=C3=
=A9 autrement dans le pr=C3=A9sent courriel."