I just started working on getting winbindd to work and I'm receiving the
following error regarding not begining able to open lsa handle on dc:
(Samba 2.2.2-4 Debian package, latest Debian 'testing' distribution)
INFO: Debug class all level = 3 (pid 22131 from pid 22131)
Processing section "[homes]"
Processing section "[PRINTER$]"
Processing section "[netlogon]"
Processing section "[printers]"
Processing section "[profiles]"
adding IPC service IPC$
adding IPC service ADMIN$
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
added interface ip=192.168.100.1 bcast=192.168.100.255 nmask=255.255.255.0
added interface ip=192.168.10.1 bcast=192.168.10.255 nmask=255.255.255.0
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
added interface ip=192.168.100.1 bcast=192.168.100.255 nmask=255.255.255.0
added interface ip=192.168.10.1 bcast=192.168.10.255 nmask=255.255.255.0
establishing connections
server: dc=, pwdb_init=0, lsa_hnd=0
resolve_wins: Attempting wins lookup for name HOME<0x1c>
resolve_wins: WINS server == <127.0.0.1>
bind succeeded on port 0
Got a positive name query response from 127.0.0.1 ( 192.168.100.1 192.168.10.1 )
bind succeeded on port 0
resolve_wins: Attempting wins lookup for name PENGUIN<0x20>
resolve_wins: WINS server == <127.0.0.1>
bind succeeded on port 0
Got a positive name query response from 127.0.0.1 ( 192.168.100.1 192.168.10.1 )
Connecting to 192.168.100.1 at port 139
failed session setup
error opening lsa handle on dc PENGUIN
--- partial smb.conf ---
[global]
domain admin group = @smbusers
# identification
netbios name = PENGUIN
workgroup = HOME
server string = Server
# domain (PDC)
security = user
os level = 250
domain master = yes
domain logons = yes
local master = yes
preferred master = yes
logon drive = H:
logon home = \\penguin\%u
logon path = \\penguin\profiles\%u
logon script = logon.bat
# winbind
winbind separator = +
winbind cache time = 10
template shell = /bin/false
template homedir = /home/%D/%u
winbind uid = 10000-20000
winbind gid = 10000-20000
# wins server
wins support = yes
name resolve order = wins lmhosts hosts bcast
... one thing I noticed about the previous winbindd posts was that they
all had 'security = domain' instead of user. I don't think I need
to
change this parameter because I want Samba to be the PDC.
Thank you,
-Paul
Paul Miller wrote:> > I just started working on getting winbindd to work and I'm receiving the > following error regarding not begining able to open lsa handle on dc: > > (Samba 2.2.2-4 Debian package, latest Debian 'testing' distribution) >> --- partial smb.conf --- > > [global] > > domain admin group = @smbusers > > # identification > netbios name = PENGUIN > workgroup = HOME > server string = Server > > # domain (PDC) > security = user > os level = 250 > domain master = yes > domain logons = yes > local master = yes > preferred master = yes > logon drive = H: > logon home = \\penguin\%u > logon path = \\penguin\profiles\%u > logon script = logon.bat > > # winbind > winbind separator = + > winbind cache time = 10 > template shell = /bin/false > template homedir = /home/%D/%u > winbind uid = 10000-20000 > winbind gid = 10000-20000 > > # wins server > wins support = yes > name resolve order = wins lmhosts hosts bcast > > ... one thing I noticed about the previous winbindd posts was that they > all had 'security = domain' instead of user. I don't think I need to > change this parameter because I want Samba to be the PDC.So, is this machine a PDC or domain member? And if its a PDC, why are you running winbind? If its not a PDC, why have security = user? What role do you want winbind to play? -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net