Hi,
If I follow the logic as supplied by Neil, and remove the "--domain" option then this works fine for all users in all domains, and machines in same domain that winbind was joined to, but not machines from remote domains. If
ah! multiple remote domains - not in a forest of trust?
I can't really see anyway to resolve this, other than moddifing the ntlm_auth line based on some unlang logic to cut out the uk, us, and au bit from the "X.mycompany.local" supplied domain name in the "host/" username. Is this even possible though??
that could work....hmm something along the lines of if (%{User-Name} =~ /.domain.wanted/({ ntlm_auth blah blah --domain DOMAINWANTED } etc etc so ntlm_auth gets fired off with the right stuff...no playing with User-Name alan