Urik
2006-Sep-07 17:26 UTC
[Samba] wbinfo -t error when samba server is restarted and windows 2000 domain server keeps running
I noticed that wbinfo -t returns error and windows clients can not access samba share when samba server is restarted (power failure) and windows 2000 domain server keeps running; wbinfo -u and wbinfo -g return expected results; after net rpc join -U is issued everything works as expected; Is there any way to avoid such behaviour? Urik
Felipe Augusto van de Wiel
2006-Sep-11 13:25 UTC
[Samba] wbinfo -t error when samba server is restarted and windows 2000 domain server keeps running
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 09/07/2006 02:26 PM, Urik escreveu:> I noticed that wbinfo -t returns error and windows clients can not > access samba share when samba server is restarted (power failure) and > windows 2000 domain server keeps running; wbinfo -u and wbinfo -g return > expected results; after net rpc join -U is issued everything works as > expected; > > Is there any way to avoid such behaviour?How is your samba server configured? It is just a member server? Can you send us your smb.conf? Please run testparm and increase the loglevel (debuglevel) values when running these commands and send also the relevant part of the logs.> UrikJust for the record, you samba server should be joined to the domain and "re-join" it every time you reboot the machine should not be necessary, which means, something is wrong. :) Kind regards, - -- Felipe Augusto van de Wiel <felipe@paranacidade.org.br> Coordenadoria de Tecnologia da Informa??o (CTI) - SEDU/PARANACIDADE http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Debian - http://enigmail.mozdev.org iD8DBQFFBWPICj65ZxU4gPQRAhNRAJ9gqosahZsjwjqyerQ3oC3IWQY2dgCgph0s JxbrMah3MhuJ9BiarT1dR74=KB+/ -----END PGP SIGNATURE-----
Urik
2006-Sep-11 14:51 UTC
[Samba] wbinfo -t error when samba server is restarted and windows 2000 domain server keeps running
Hello, that is my first posting and I hope I provided enough details. 1) system: (SLES 9) Linux mp1 2.6.5-7.193-s390x #1 SMP Wed Jul 20 14:39:18 UTC 2005 s390x s390x s390x GNU/Linux 2) samba version: samba-doc-3.0.20b-3.4 samba-client-3.0.20b-3.4 samba-winbind-3.0.20b-3.4 samba-3.0.20b-3.4 3) smb.conf: # Samba config file created using SWAT # from 172.16.8.1 (172.16.8.1) # Date: 2006/08/27 11:38:37 [global] workgroup = WGRP security = DOMAIN map to guest = Bad User username map = /etc/samba/smbusers socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=14596 SO_RCVBUF=14596 logon path = \\%L\profiles\.msprofile logon drive = P: logon home = \\%L\%U\.9xprofile domain master = No wins server = 172.16.2.100 ldap idmap suffix = ou=Idmap ldap machine suffix = ou=Computers ldap suffix = dc=example,dc=com ldap ssl = no idmap uid = 10000-20000 idmap gid = 10000-20000 winbind use default domain = Yes printer admin = @ntadmin, root, administrator cups options = raw [homes] comment = Home Directories valid users = %S read only = No inherit permissions = Yes browseable = No [profiles] comment = Network Profiles Service path = %H read only = No create mask = 0600 directory mask = 0700 store dos attributes = Yes browseable = No available = No [users] comment = All users path = /home read only = No inherit permissions = Yes veto files = /aquota.user/groups/shares/ browseable = No available = No [groups] comment = All groups path = /home/groups read only = No inherit permissions = Yes browseable = No available = No [pdf] comment = PDF creator path = /var/tmp create mask = 0600 printable = Yes [printers] comment = All Printers path = /var/tmp create mask = 0600 printable = Yes browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = @ntadmin, root force group = ntadmin create mask = 0664 directory mask = 0775 [vala] path = /home/visioa/vala [kova] path = /home/visioa/kova 4) log.wb-WGRP from last power failure and increased debug level [2006/08/26 16:42:31, 3] lib/util.c:fcntl_lock(1826) fcntl_lock: fcntl lock gave errno 11 (Resource temporarily unavailable) [2006/08/26 16:42:31, 3] lib/util.c:fcntl_lock(1845) fcntl_lock: lock failed at offset 0 count 1 op 6 type 0 (Resource temporarily unavailable) [2006/08/26 16:42:31, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(105) cm_get_ipc_userpass: No auth-user defined [2006/08/26 16:42:31, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181) lsa_io_sec_qos: length c does not match size 8 [2006/08/26 16:42:31, 3] nsswitch/winbindd_misc.c:winbindd_dual_list_trusted_domains(124) [ 1889]: list trusted domains [2006/08/26 16:42:31, 3] nsswitch/winbindd_rpc.c:trusted_domains(837) rpc: trusted_domains [2006/08/26 16:42:31, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181) lsa_io_sec_qos: length c does not match size 8 [2006/08/26 16:43:51, 3] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607) [ 1889]: pam auth crap domain: METAL user: user1 [2006/08/26 16:43:51, 3] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667) could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED) [2006/08/26 16:43:51, 2] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801) NTLM CRAP authentication for user [METAL]\[user1] returned NT_STATUS_ACCESS_DENIED (PAM: 4) [2006/08/26 16:43:57, 3] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607) [ 1889]: pam auth crap domain: METAL user: user1 [2006/08/26 16:43:57, 3] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667) could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED) [2006/08/26 16:43:57, 2] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801) NTLM CRAP authentication for user [METAL]\[user1] returned NT_STATUS_ACCESS_DENIED (PAM: 4) [2006/08/26 16:43:57, 3] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607) [ 1889]: pam auth crap domain: METAL user: user1 [2006/08/26 16:43:57, 3] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667) could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED) [2006/08/26 16:43:57, 2] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801) NTLM CRAP authentication for user [METAL]\[user1] returned NT_STATUS_ACCESS_DENIED (PAM: 4) [2006/08/26 16:43:58, 3] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607) [ 1889]: pam auth crap domain: METAL user: user1 [2006/08/26 16:43:58, 3] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667) could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED) [2006/08/26 16:43:58, 2] nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801) NTLM CRAP authentication for user [METAL]\[user1] returned NT_STATUS_ACCESS_DENIED (PAM: 4) ..... Last four lines are repeated several 100 times for different users trying to access samba share. Thank you all for your help. Urik Felipe Augusto van de Wiel pravi:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 09/07/2006 02:26 PM, Urik escreveu: > >> I noticed that wbinfo -t returns error and windows clients can not >> access samba share when samba server is restarted (power failure) and >> windows 2000 domain server keeps running; wbinfo -u and wbinfo -g return >> expected results; after net rpc join -U is issued everything works as >> expected; >> >> Is there any way to avoid such behaviour? >> > > How is your samba server configured? It is just a member > server? Can you send us your smb.conf? > > Please run testparm and increase the loglevel (debuglevel) > values when running these commands and send also the relevant part > of the logs. > > > >> Urik >> > > Just for the record, you samba server should be joined to > the domain and "re-join" it every time you reboot the machine > should not be necessary, which means, something is wrong. :) > > Kind regards, > > - -- > Felipe Augusto van de Wiel <felipe@paranacidade.org.br> > Coordenadoria de Tecnologia da Informa??o (CTI) - SEDU/PARANACIDADE > http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300) > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.5 (GNU/Linux) > Comment: Using GnuPG with Debian - http://enigmail.mozdev.org > > iD8DBQFFBWPICj65ZxU4gPQRAhNRAJ9gqosahZsjwjqyerQ3oC3IWQY2dgCgph0s > JxbrMah3MhuJ9BiarT1dR74> =KB+/ > -----END PGP SIGNATURE----- >