Hi all.
Funny thing happend: I had winbindd working, but now I can't get it back
up correctly. I'm not sure what I'm doing differently.
Samba version 2.2.5.
'wbinfo -u' says "Error looking up domain users". I joined
the domain
with the command: 'smbpasswd -j OUR_DOMAIN -r thepdc -U Administrator'
and this returned saying "Joined domain OUR_DOMAIN".
Both smbd and nmbd are running, so is the ldap server if that matters.
winbind says "NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND" but I'm
really
certain what that means. I can ping the PDC, and I did join the domain.
Here's my log.winbind when running debug level 5:
[2002/08/12 09:12:27, 1] nsswitch/winbindd.c:main(767)
winbindd version 2.2.5 started.
Copyright The Samba Team 2000-2001
[2002/08/12 09:12:27, 3] param/loadparm.c:init_globals(1261)
Initialising global parameters
[2002/08/12 09:12:27, 3] param/params.c:pm_process(577)
params.c:pm_process() - Processing configuration file
"/share/sys/samba/samba-2.2.5/conf/smb.conf"
[2002/08/12 09:12:27, 3] param/loadparm.c:do_section(3024)
Processing section "[global]"
doing parameter encrypt passwords = yes
doing parameter security = user
doing parameter netbios name = smbserver
[2002/08/12 09:12:27, 4] param/loadparm.c:handle_netbios_name(2333)
handle_netbios_name: set global_myname to: SMBSERVER
doing parameter comment = Red Hat Samba Server
doing parameter workgroup = our_domain
doing parameter ldap admin dn = "cn=Admin,dc=example,dc=org"
doing parameter ldap suffix = "dc=example,dc=org"
doing parameter ldap ssl = off
doing parameter logon drive = U:
doing parameter logon path = \\%N\profiles\%g
doing parameter public = yes
doing parameter browseable = yes
doing parameter writeable = yes
doing parameter logon script = LOGON.BAT
doing parameter winbind separator = _
doing parameter winbind uid = 10000-20000
doing parameter winbind gid = 10000-20000
doing parameter winbind enum users = yes
doing parameter winbind enum groups = yes
[2002/08/12 09:12:27, 2] param/loadparm.c:do_section(3042)
Processing section "[printers]"
doing parameter comment = All printers
doing parameter path = /var/spool/samba
doing parameter browseable = yes
doing parameter public = yes
doing parameter guest ok = yes
doing parameter writeable = no
doing parameter printable = yes
doing parameter printer admin = root
[2002/08/12 09:12:27, 2] param/loadparm.c:do_section(3042)
Processing section "[print$]"
doing parameter comment = Printer Drivers
doing parameter path = /share/sys/samba/samba-2.2.5/drivers
doing parameter browseable = yes
doing parameter guest ok = no
doing parameter read only = yes
doing parameter write list = root
[2002/08/12 09:12:27, 2] param/loadparm.c:do_section(3042)
Processing section "[netlogon]"
doing parameter path = /share/sys/samba/samba-2.2.5/netlogon
doing parameter locking = no
doing parameter read only = yes
doing parameter writeable = no
doing parameter browseable = no
[2002/08/12 09:12:27, 2] param/loadparm.c:do_section(3042)
Processing section "[profiles]"
doing parameter path = /share/sys/samba/samba-2.2.5/profiles
doing parameter read only = no
doing parameter writeable = yes
doing parameter browseable = yes
doing parameter guest ok = yes
doing parameter create mask = 0600
doing parameter directory mask = 0700
[2002/08/12 09:12:27, 2] param/loadparm.c:do_section(3042)
Processing section "[tmp]"
doing parameter path = /tmp
doing parameter guest ok = yes
doing parameter writeable = yes
[2002/08/12 09:12:27, 4] param/loadparm.c:lp_load(3472)
pm_process() returned Yes
[2002/08/12 09:12:27, 3] param/loadparm.c:lp_add_ipc(2011)
adding IPC service IPC$
[2002/08/12 09:12:27, 3] param/loadparm.c:lp_add_ipc(2011)
adding IPC service ADMIN$
[2002/08/12 09:12:27, 2] lib/interface.c:add_interface(81)
added interface ip=192.168.1.35 bcast=192.168.1.255 nmask=255.255.255.0
[2002/08/12 09:12:27, 5] lib/charset.c:load_client_codepage(194)
load_client_codepage: loading codepage 850.
[2002/08/12 09:12:27, 5] lib/util_unistr.c:load_unicode_map(597)
load_unicode_map: loading unicode map for codepage 850.
[2002/08/12 09:12:27, 5] lib/util_unistr.c:load_unicode_map(597)
load_unicode_map: loading unicode map for codepage ISO8859-1.
[2002/08/12 09:12:27, 2] lib/interface.c:add_interface(81)
added interface ip=192.168.1.35 bcast=192.168.1.255 nmask=255.255.255.0
[2002/08/12 09:12:27, 5] tdb/tdbutil.c:tdb_log(492)
tdb(unknown): tdb_brlock failed (fd=5) at offset 4 rw_type=1 lck_type=13
[2002/08/12 09:12:27, 3] libsmb/namequery.c:resolve_lmhosts(768)
resolve_lmhosts: Attempting lmhosts lookup for name OUR_DOMAIN<0x1b>
[2002/08/12 09:12:27, 4] libsmb/namequery.c:startlmhosts(474)
startlmhosts: Can't open lmhosts file
/share/sys/samba/samba-2.2.5/conf/lmhosts. Error was No such file or directory
[2002/08/12 09:12:27, 3] libsmb/namequery.c:resolve_wins(709)
resolve_wins: Attempting wins lookup for name OUR_DOMAIN<0x1b>
[2002/08/12 09:12:27, 3] libsmb/namequery.c:resolve_wins(720)
resolve_wins: WINS server resolution selected and no WINS servers listed.
[2002/08/12 09:12:27, 3] libsmb/namequery.c:name_resolve_bcast(658)
name_resolve_bcast: Attempting broadcast lookup for name
OUR_DOMAIN<0x1b>
[2002/08/12 09:12:27, 3] lib/util_sock.c:open_socket_in(813)
bind succeeded on port 0
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_KEEPALIVE = 0
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_REUSEADDR = 1
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_BROADCAST = 1
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(109)
Could not test socket option TCP_NODELAY.
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option IPTOS_LOWDELAY = 0
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option IPTOS_THROUGHPUT = 0
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_SNDBUF = 65535
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_RCVBUF = 65535
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_SNDLOWAT = 1
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_RCVLOWAT = 1
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_SNDTIMEO = 0
[2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_RCVTIMEO = 0
[2002/08/12 09:12:27, 5] libsmb/nmblib.c:send_udp(741)
Sending a packet of len 50 to (192.168.1.255) on port 137
[2002/08/12 09:12:27, 5] libsmb/nmblib.c:read_packet(719)
Received a packet of len 62 from (192.168.1.12) port 137
[2002/08/12 09:12:27, 4] libsmb/nmblib.c:debug_nmb_packet(107)
nmb packet from 192.168.1.12(137) header: id=26431 opcode=Query(0)
response=Yes
header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=OUR_DOMAIN<1b> rr_type=32 rr_class=1 ttl=300000
answers 0 char `..... hex 6000C0A8010C
[2002/08/12 09:12:27, 2] libsmb/namequery.c:name_query(421)
Got a positive name query response from 192.168.1.12 ( 192.168.1.12 )
[2002/08/12 09:12:27, 3] lib/util_sock.c:open_socket_in(813)
bind succeeded on port 0
[2002/08/12 09:12:27, 5] libsmb/nmblib.c:send_udp(741)
Sending a packet of len 50 to (192.168.1.12) on port 137
[2002/08/12 09:12:29, 5] libsmb/nmblib.c:send_udp(741)
Sending a packet of len 50 to (192.168.1.12) on port 137
[2002/08/12 09:12:31, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435)
Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc
(NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)
[2002/08/12 09:12:41, 1] nsswitch/winbindd_util.c:init_domain_list(143)
Retrying startup domain sid fetch for OUR_DOMAIN
[2002/08/12 09:12:41, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435)
Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc
(NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)
[2002/08/12 09:12:51, 1] nsswitch/winbindd_util.c:init_domain_list(143)
Retrying startup domain sid fetch for OUR_DOMAIN
[2002/08/12 09:12:51, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435)
Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc
(NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)
[2002/08/12 09:13:01, 1] nsswitch/winbindd_util.c:init_domain_list(143)
Retrying startup domain sid fetch for OUR_DOMAIN
[2002/08/12 09:13:01, 3] libsmb/namequery.c:resolve_lmhosts(768)
resolve_lmhosts: Attempting lmhosts lookup for name OUR_DOMAIN<0x1b>
[2002/08/12 09:13:01, 4] libsmb/namequery.c:startlmhosts(474)
startlmhosts: Can't open lmhosts file
/share/sys/samba/samba-2.2.5/conf/lmhosts. Error was No such file or directory
[2002/08/12 09:13:01, 3] libsmb/namequery.c:resolve_wins(709)
resolve_wins: Attempting wins lookup for name OUR_DOMAIN<0x1b>
[2002/08/12 09:13:01, 3] libsmb/namequery.c:resolve_wins(720)
resolve_wins: WINS server resolution selected and no WINS servers listed.
[2002/08/12 09:13:01, 3] libsmb/namequery.c:name_resolve_bcast(658)
name_resolve_bcast: Attempting broadcast lookup for name
OUR_DOMAIN<0x1b>
[2002/08/12 09:13:01, 3] lib/util_sock.c:open_socket_in(813)
bind succeeded on port 0
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_KEEPALIVE = 0
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_REUSEADDR = 1
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_BROADCAST = 1
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(109)
Could not test socket option TCP_NODELAY.
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option IPTOS_LOWDELAY = 0
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option IPTOS_THROUGHPUT = 0
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_SNDBUF = 65535
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_RCVBUF = 65535
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_SNDLOWAT = 1
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_RCVLOWAT = 1
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_SNDTIMEO = 0
[2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111)
socket option SO_RCVTIMEO = 0
[2002/08/12 09:13:01, 5] libsmb/nmblib.c:send_udp(741)
Sending a packet of len 50 to (192.168.1.255) on port 137
[2002/08/12 09:13:01, 5] libsmb/nmblib.c:read_packet(719)
Received a packet of len 62 from (192.168.1.12) port 137
[2002/08/12 09:13:01, 4] libsmb/nmblib.c:debug_nmb_packet(107)
nmb packet from 192.168.1.12(137) header: id=19782 opcode=Query(0)
response=Yes
header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=OUR_DOMAIN<1b> rr_type=32 rr_class=1 ttl=300000
answers 0 char `..... hex 6000C0A8010C
[2002/08/12 09:13:01, 2] libsmb/namequery.c:name_query(421)
Got a positive name query response from 192.168.1.12 ( 192.168.1.12 )
[2002/08/12 09:13:01, 3] lib/util_sock.c:open_socket_in(813)
bind succeeded on port 0
[2002/08/12 09:13:01, 5] libsmb/nmblib.c:send_udp(741)
Sending a packet of len 50 to (192.168.1.12) on port 137
[2002/08/12 09:13:03, 5] libsmb/nmblib.c:send_udp(741)
Sending a packet of len 50 to (192.168.1.12) on port 137
[2002/08/12 09:13:05, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435)
Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc
(NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)
[2002/08/12 09:13:15, 1] nsswitch/winbindd_util.c:init_domain_list(143)
Retrying startup domain sid fetch for OUR_DOMAIN
[2002/08/12 09:13:15, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435)
Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc
(NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)
[2002/08/12 09:13:25, 1] nsswitch/winbindd_util.c:init_domain_list(143)
Retrying startup domain sid fetch for OUR_DOMAIN
[2002/08/12 09:13:25, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435)
Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc
(NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)
[2002/08/12 09:13:35, 1] nsswitch/winbindd_util.c:init_domain_list(143)
Retrying startup domain sid fetch for OUR_DOMAIN
[and so on...]
Any help available would be very appreciated; thanks!
Erik.
Anthony J. Breeds-Taurima
2002-Aug-13 19:01 UTC
[Samba] Winbind cannot find/connect to PDC.
On 12 Aug 2002, Erik Enge wrote:> Hi all. > > Funny thing happend: I had winbindd working, but now I can't get it back > up correctly. I'm not sure what I'm doing differently. > > Samba version 2.2.5. > > 'wbinfo -u' says "Error looking up domain users". I joined the domain > with the command: 'smbpasswd -j OUR_DOMAIN -r thepdc -U Administrator' > and this returned saying "Joined domain OUR_DOMAIN". > > Both smbd and nmbd are running, so is the ldap server if that matters. > > winbind says "NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND" but I'm really > certain what that means. I can ping the PDC, and I did join the domain. > > Here's my log.winbind when running debug level 5: > > [2002/08/12 09:12:27, 1] nsswitch/winbindd.c:main(767) > winbindd version 2.2.5 started. > Copyright The Samba Team 2000-2001 > [2002/08/12 09:12:27, 3] param/loadparm.c:init_globals(1261) > Initialising global parameters > [2002/08/12 09:12:27, 3] param/params.c:pm_process(577) > params.c:pm_process() - Processing configuration file "/share/sys/samba/samba-2.2.5/conf/smb.conf" > [2002/08/12 09:12:27, 3] param/loadparm.c:do_section(3024) > Processing section "[global]" > doing parameter encrypt passwords = yes > doing parameter security = userShouldn't this be domain? Also what do wbinfo -t wbinfo -u say? Yours Tony Jan 22-25 2003 Linux.Conf.AU http://linux.conf.au/ The Australian Linux Technical Conference!
Are you sure that winbindd (!) is running. I only get the message (Could not check secret), when winbindd is not running. If the secret is bad, i get the message (secret is bad). Bernd> -----Original Message----- > From: Anthony J. Breeds-Taurima [mailto:tony@cantech.net.au] > Sent: Friday, August 16, 2002 8:12 AM > To: Erik Enge > Cc: samba@samba.org > Subject: Re: [Samba] Winbind cannot find/connect to PDC. > > > On 14 Aug 2002, Erik Enge wrote: > > > root@cancun# bin/wbinfo -t > > Could not check secret > > Hmmm that looks bad, I think it means either your domain > membership is wrong > or wbinfo can't read you tdb. > > If it were me I would backup my current install and rebuild, > and reinstall > samba, such that I was certain that everything was compiled > at the same time. > Delete my account from the PDC and rejoin/setup samba. > > Of course that is really only possible in downtime or on an > experimental > system. > > Yours Tony > > Jan 22-25 2003 Linux.Conf.AU > http://linux.conf.au/ > The Australian Linux Technical Conference! > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >
Hi!> Hi all. Funny thing happend: I had winbindd working, but now I can't get it > back up correctly. I'm not sure what I'm doing differently. Samba version > 2.2.5. 'wbinfo -u' says "Error looking up domain users". I joined the > domain with the command: > 'smbpasswd -j OUR_DOMAIN -r thepdc -U Administrator' > and this returned saying "Joined domain OUR_DOMAIN". Both smbd and nmbd are > running, so is the ldap server if that matters. winbind says > "NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND" but I'm really > certain what that means. I can ping the PDC, and I did join the domain.Exactly the same happened to me! Before that I had samba version 2.2.2 working with no problem at all - including winbindd. Now e.g. wbinfo cannot 'ping' winbindd using 'wbinfo -p' command but winbindd started up (with error messages like yours though). I figured out that winbindd did not create a pipe in /tmp/.winbindd which it should do on startup. Tell me - does your winbindd do that correctly (you may need to move/delete some old /tmp/.winbindd directory before starting up the daemons)? I understand that e.g. wbinfo sends requests to winbindd itself through that pipe. Maybe there is a problem creating/using the pipe on our systems? I'm using a stripped down version of SuSE Linux 8.0 with samba built from a source rpm package. Libc version is 2.2.5 and libacl/libattr are taken from current XFS release. Thomas