samba - Jun 2017 - failed to call wbcGetpwnam/wbcGetgrnam/wbcGetpwsid WBC_ERR_DOMAIN_NOT_FOUND

> Op 3 jun. 2017 om 23:07 heeft Rowland Penny via samba <samba at
lists.samba.org> het volgende geschreven:
> 
> On Sat, 3 Jun 2017 21:49:15 +0100
> Alex Matthews via samba <samba at lists.samba.org> wrote:
> 
>> I feel you have missed the point of my original post, or maybe I
>> wasn't clear enough. This is not a freshly provisioned install,
this
>> is an install that has been in use for some 12-18 months.
>> 
> 
> Nowhere, until now, did you mention this.
> 
> So, what you are saying is, your Samba AD DC suddenly started giving
> you problems. What, if anything, changed ?
> 
> Have you checked the AD database with 'samba-tool dbcheck' ?
> 
> Have you updated any packages etc ?
> 
> Rowland
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
in this complete post i miss
getent passwd username
id username.
and resolv.conf
and upgrade from which version?
did you check the change logs as of your old version up to this version? 4.5.8
isnt 12-18 months old.
arch wiki supplies an excelent howto and check list on samba dc setups, i can
not check it, (still on holiday).

i suggest upgrade to at least 4.5.10 but i do also suggest wait untill 4.6.5 and
use that one.
why? lots of winbind fixes, my guess is you hit a bug but as said im limit on
checking things out.

and can you explain what the problem exact is, beside the error your getting, so
what is not working, exept the 'local' wbinfo checks.

ill bet Rowland knows whats goingon if you answer my questions.

greetz for sunny Sicilie.

Louis

On Sun, 4 Jun 2017 00:03:48 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:

 
> in this complete post i miss
> getent passwd username
> id username.
> and resolv.conf
> and upgrade from which version?
> did you check the change logs as of your old version up to this
> version? 4.5.8 isnt 12-18 months old. arch wiki supplies an excelent
> howto and check list on samba dc setups, i can not check it, (still
> on holiday).
> 
> i suggest upgrade to at least 4.5.10 but i do also suggest wait
> untill 4.6.5 and use that one. why? lots of winbind fixes, my guess
> is you hit a bug but as said im limit on checking things out.
> 
> and can you explain what the problem exact is, beside the error your
> getting, so what is not working, exept the 'local' wbinfo checks.
> 
> ill bet Rowland knows whats goingon if you answer my questions.
> 
> greetz for sunny Sicilie.
> 
> Louis
> 
Hi Louis, hope you are having a good holiday ;-)

The OP is using Arch Linux, not sure if using a rolling release is a
good idea for a server. Until yesterday he hadn't mentioned that it
wasn't a new install, but something that had been running for sometime.

In his first post, he posted a list of commands he had tried, most
returned the expected results ('getent passwd username' was amongst
them) but there was these that failed:

# wbinfo -i "testuser"
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user testuser

# wbinfo -i "SMC\testuser"
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user SMC\testuser

# wbinfo -n testuser
S-1-5-21-1989633265-3966479559-1628277992-3078

# wbinfo --user-sidinfo S-1-5-21-1989633265-3966479559-1628277992-3078
failed to call wbcGetpwsid: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user sid S-1-5-21-1989633265-
3966479559-1628277992-3078

All of his commands worked for me, so I supplied him with my notes made
when installing Samba on Devuan, he replied that didn't help and he
was still having problems. I replied that I would set up Arch Linux in
A VM and install a DC.

This I did, with some difficulty, mainly because Arch is very
different from Devuan and then ran his tests. All of them worked.
I then supplied him with my results etc, just to get abuse back, you
just cannot help some people.

Rowland

He did not test :
getent passwd username
result ?

He did test : 
getent passwd
result ok

He could test with : 
wbinfo --own-domain
Results: 
NTDOM

And this should show: 
wbinfo --all-domains
Results: 
BUILDIN
HOSTNAME
NTDOM

Im guessing, the last one wil fail. 
Things to check. 
samba idmap setup. 
nsswitch.conf
idmap.conf
pam setup.

So best option lookt to me upgrade to 4.6.5 and run samba-tool testparm.
That show config errors in idmap.

That all i can think off, i dont know arch linux that well also. 


Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Rowland Penny via samba
> Verzonden: zondag 4 juni 2017 9:32
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] failed to call 
> wbcGetpwnam/wbcGetgrnam/wbcGetpwsid WBC_ERR_DOMAIN_NOT_FOUND
> 
> On Sun, 4 Jun 2017 00:03:48 +0200
> "L.P.H. van Belle via samba" <samba at lists.samba.org>
wrote:
> 
>  
> > in this complete post i miss
> > getent passwd username
> > id username.
> > and resolv.conf
> > and upgrade from which version?
> > did you check the change logs as of your old version up to this 
> > version? 4.5.8 isnt 12-18 months old. arch wiki supplies an 
> excelent 
> > howto and check list on samba dc setups, i can not check 
> it, (still on 
> > holiday).
> > 
> > i suggest upgrade to at least 4.5.10 but i do also suggest 
> wait untill 
> > 4.6.5 and use that one. why? lots of winbind fixes, my guess is you 
> > hit a bug but as said im limit on checking things out.
> > 
> > and can you explain what the problem exact is, beside the 
> error your 
> > getting, so what is not working, exept the 'local' wbinfo
checks.
> > 
> > ill bet Rowland knows whats goingon if you answer my questions.
> > 
> > greetz for sunny Sicilie.
> > 
> > Louis
> > 
> 
> Hi Louis, hope you are having a good holiday ;-)
Yes, i had a good holiday, thanks. Bit low on sleep but that worked out.. 
> 
> The OP is using Arch Linux, not sure if using a rolling 
> release is a good idea for a server. Until yesterday he 
> hadn't mentioned that it wasn't a new install, but something 
> that had been running for sometime.
> 
> In his first post, he posted a list of commands he had tried, 
> most returned the expected results ('getent passwd username' 
> was amongst them) but there was these that failed:
> 
> # wbinfo -i "testuser"
> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND Could 
> not get info for user testuser
> 
> # wbinfo -i "SMC\testuser"
> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND Could 
> not get info for user SMC\testuser
> 
> # wbinfo -n testuser
> S-1-5-21-1989633265-3966479559-1628277992-3078
> 
> # wbinfo --user-sidinfo S-1-5-21-1989633265-3966479559-1628277992-3078
> failed to call wbcGetpwsid: WBC_ERR_DOMAIN_NOT_FOUND Could 
> not get info for user sid S-1-5-21-1989633265-
> 3966479559-1628277992-3078
> 
> All of his commands worked for me, so I supplied him with my 
> notes made when installing Samba on Devuan, he replied that 
> didn't help and he was still having problems. I replied that 
> I would set up Arch Linux in A VM and install a DC.
> 
> This I did, with some difficulty, mainly because Arch is very 
> different from Devuan and then ran his tests. All of them worked.
> I then supplied him with my results etc, just to get abuse 
> back, you just cannot help some people.
Yes, correct but for you. 
https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller 
A basic but pretty good setup for arch. ;-) so next time it wont take long.
> 
> Rowland
>  
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

On Wed, 7 Jun 2017 17:01:03 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> He did not test :
> getent passwd username
> result ?
> 
> He did test : 
> getent passwd
> result ok
> 
> He could test with : 
> wbinfo --own-domain
> Results: 
> NTDOM
> 
> And this should show: 
> wbinfo --all-domains
> Results: 
> BUILDIN
> HOSTNAME
> NTDOM
> 
> Im guessing, the last one wil fail. 
> Things to check. 
> samba idmap setup. 
> nsswitch.conf
> idmap.conf
> pam setup.
> 
> So best option lookt to me upgrade to 4.6.5 and run samba-tool
> testparm. That show config errors in idmap.
Hi Louis,

As I said, I set up an ARCH DC and got everything to work, I then sent
him my notes, his response was 'great, but I have been using my setup
for some time'

I got everything to work, wbinfo and getent.

I would agree, the user needs to upgrade and then follow your advice
(and my notes) and try again. I still cannot understand why he is using
a rolling release for something that really needs a static base with
few updates. 
> 
> That all i can think off, i dont know arch linux that well also. 
I have decided I don't want to know Arch any better ;-)


> > Hi Louis, hope you are having a good holiday ;-)
> Yes, i had a good holiday, thanks. Bit low on sleep but that worked
> out.. 
I thought the whole idea behind a holiday was to relax and take things
easy ;-)
> Yes, correct but for you. 
>
https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller
> A basic but pretty good setup for arch. ;-) so next time it wont take
> long.
Setting up Samba didn't take much time, it was getting Arch installed
that took all the time for me.

Rowland