samba - Dec 2004 - winbind cannot authenticate with new win2k PDC

Hi everyone,


System info:
 OS: Suse 9.1
 samba: 3.0.2a-51
 PDC: win2K


My winbind was working well with the win2k PDC.  I'm using
it to control access to my samba shares and subversion repositories.

Then they had to change the win2k's hardware.  The hostname,
domain name, settings, etc. were retained (so they say).
And this broke my authentication.

I rejoined the domain using net ads join.

`wbinfo -D EAZIX` gives:
Name              : EAZIX
Alt_Name          : eazix.com
SID               : S-1-5-21-1343024091-527237240-725345543
Active Directory  : Yes
Native            : No
Primary           : Yes
Sequence          : -1

`wbinfo -u` fails:
Error looking up domain users

`wbinfo -g` also fails:
Error looking up domain groups


When I try to access the samba shares, I get this in
/var/log/samba/log.winbind:
[2004/12/23 09:50:31, 1] nsswitch/winbindd_group.c:fill_grent_mem(124)
  could not lookup membership for group rid
S-1-5-21-1343024091-527237240-725345543-1263 in domain EAZIX (error:
NT_STATUS_ACCESS_DENIED)

How do I fix this?


Thanks in advance!

-Joey

Additional info:

When the correct password is given:

[2004/12/23 11:11:00, 1] nsswitch/winbindd_group.c:fill_grent_mem(124)
  could not lookup membership for group rid
S-1-5-21-1343024091-527237240-725345543-1263 in domain EAZIX (error:
NT_STATUS_ACCESS_DENIED)


And if I give the wrong password:

[2004/12/23 11:09:24, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth(212)
  Plain-text authentication for user <user> returned
NT_STATUS_WRONG_PASSWORD (PAM: 7)


It seems authentication is working fine.  But somehow, winbind can't get
the group information.
>-----Original Message-----
>From: samba-bounces+joey.legaspi=eazix.com@lists.samba.org 
>[mailto:samba-bounces+joey.legaspi=eazix.com@lists.samba.org] 
>On Behalf Of Joey Legaspi
>Sent: Thursday, December 23, 2004 10:43 AM
>To: samba@lists.samba.org
>Subject: [Samba] winbind cannot authenticate with new win2k PDC
>
>Hi everyone,
>
>
>System info:
> OS: Suse 9.1
> samba: 3.0.2a-51
> PDC: win2K
>
>
>My winbind was working well with the win2k PDC.  I'm using
>it to control access to my samba shares and subversion repositories.
>
>Then they had to change the win2k's hardware.  The hostname,
>domain name, settings, etc. were retained (so they say).
>And this broke my authentication.
>
>I rejoined the domain using net ads join.
>
>`wbinfo -D EAZIX` gives:
>Name              : EAZIX
>Alt_Name          : eazix.com
>SID               : S-1-5-21-1343024091-527237240-725345543
>Active Directory  : Yes
>Native            : No
>Primary           : Yes
>Sequence          : -1
>
>`wbinfo -u` fails:
>Error looking up domain users
>
>`wbinfo -g` also fails:
>Error looking up domain groups
>
>
>When I try to access the samba shares, I get this in
>/var/log/samba/log.winbind:
>[2004/12/23 09:50:31, 1] nsswitch/winbindd_group.c:fill_grent_mem(124)
>  could not lookup membership for group rid
>S-1-5-21-1343024091-527237240-725345543-1263 in domain EAZIX (error:
>NT_STATUS_ACCESS_DENIED)
>
>How do I fix this?
>
>
>Thanks in advance!
>
>-Joey
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>
>