mm@spedkol.pl
2008-Feb-29 10:25 UTC
[Samba] problem with winbind (netlogon proxy only mode)
Hello I have two similar servers, both are Debian Etch (fully updated). Both work as PDC with samba 3.0.24-6etch9. Both have squid proxy working and I am using winbind to authenticate my proxy users. Couple of days ago I've encountered a problem with authorization on one of my servers. I realized that winbind stopped working properly. wbinfo -t now gives: checking the trust secret via RPC calls failed error code was NT_STATUS_INVALID_NETWORK_RESPONSE (0xc00000c3) Could not check secret I've compared winbind's logs on both of my servers (the second one still works OK) not-working winbind: [2008/02/27 12:19:49, 10] passdb/secrets.c:secrets_named_mutex(778) secrets_named_mutex: got mutex for SEA [2008/02/27 12:19:49, 6] libsmb/clientgen.c:write_socket(132) write_socket(15,183) [2008/02/27 12:19:49, 6] libsmb/clientgen.c:write_socket(135) write_socket(15,183) wrote 183 [2008/02/27 12:19:49, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 1 [2008/02/27 12:19:49, 5] lib/util.c:show_msg(485) [2008/02/27 12:19:49, 5] lib/util.c:show_msg(495) size=1 smb_com=0x0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=0 smb_tid=0 smb_pid=0 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=0 [2008/02/27 12:19:49, 5] lib/util.c:show_msg(485) [2008/02/27 12:19:49, 5] lib/util.c:show_msg(495) size=1 smb_com=0x0 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=0 smb_flg2=0 smb_tid=0 smb_pid=0 smb_uid=0 smb_mid=0 smt_wct=0 smb_bcc=0 [2008/02/27 12:19:49, 5] nsswitch/winbindd_cm.c:cm_prepare_connection(346) Connected anonymously while my properly working server gives: [2008/02/27 12:31:27, 10] passdb/secrets.c:secrets_named_mutex(778) secrets_named_mutex: got mutex for TRIO [2008/02/27 12:31:27, 6] libsmb/clientgen.c:write_socket(132) write_socket(15,183) [2008/02/27 12:31:27, 6] libsmb/clientgen.c:write_socket(135) write_socket(15,183) wrote 183 [2008/02/27 12:31:27, 10] lib/util_sock.c:read_smb_length_return_keepalive(623) got smb length of 127 [2008/02/27 12:31:27, 5] lib/util.c:show_msg(485) [2008/02/27 12:31:27, 5] lib/util.c:show_msg(495) size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=32104 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=41472 (0xA200) smb_vwv[ 8]= 125 (0x7D) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=12369 (0x3051) smb_vwv[13]=13386 (0x344A) smb_vwv[14]=51321 (0xC879) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 size=127 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=0 smb_pid=32104 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[ 0]= 7 (0x7) smb_vwv[ 1]=12803 (0x3203) smb_vwv[ 2]= 256 (0x100) smb_vwv[ 3]= 1024 (0x400) smb_vwv[ 4]= 65 (0x41) smb_vwv[ 5]= 0 (0x0) smb_vwv[ 6]= 256 (0x100) smb_vwv[ 7]=41472 (0xA200) smb_vwv[ 8]= 125 (0x7D) smb_vwv[ 9]=64768 (0xFD00) smb_vwv[10]=33011 (0x80F3) smb_vwv[11]=32896 (0x8080) smb_vwv[12]=12369 (0x3051) smb_vwv[13]=13386 (0x344A) smb_vwv[14]=51321 (0xC879) smb_vwv[15]=50177 (0xC401) smb_vwv[16]= 255 (0xFF) smb_bcc=58 [2008/02/27 12:31:27, 10] lib/util.c:dump_data(2222) [000] 74 72 69 6F 00 00 00 00 00 00 00 00 00 00 00 00 trio.... ........ [010] 60 28 06 06 2B 06 01 05 05 02 A0 1E 30 1C A0 0E `(..+... ..?.0.?. [020] 30 0C 06 0A 2B 06 01 04 01 82 37 02 02 0A A3 0A 0...+... ..7...?. [030] 30 08 A0 06 1B 04 4E 4F 4E 45 0.?...NO NE [2008/02/27 12:31:27, 5] nsswitch/winbindd_cm.c:cm_prepare_connection(298) connecting to TRIO from TRIO with username [LAGUNA]\[TRIO$] I changed nothing in my smb.conf. The only difference between both servers is libpcre3 package (Perl 5 Compatible Regular Expression Library) On my "working" server it is 6.7+7.4-2 version and on "non-working" it is 6.7+7.4-3 (I've stopped system updates when I saw this problem). Could anybody help? Regards MM
Maybe Matching Threads
- Windows 2003 AD <-> Samba 3.0.23c
- Samba 3.0.25c and Samba 3.0.26a on AIX 5.3 - Windows Service Accounts & smbclient issues...
- Urgent Problem with failed new User Login to computers on Samba AD Domain
- Client Windows accessing Samba Share (krb5/ad2008/winbind)
- Windows 2003 Active Directory - Cannot authenticate