Hi all. Funny thing happend: I had winbindd working, but now I can't get it back up correctly. I'm not sure what I'm doing differently. Samba version 2.2.5. 'wbinfo -u' says "Error looking up domain users". I joined the domain with the command: 'smbpasswd -j OUR_DOMAIN -r thepdc -U Administrator' and this returned saying "Joined domain OUR_DOMAIN". Both smbd and nmbd are running, so is the ldap server if that matters. winbind says "NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND" but I'm really certain what that means. I can ping the PDC, and I did join the domain. Here's my log.winbind when running debug level 5: [2002/08/12 09:12:27, 1] nsswitch/winbindd.c:main(767) winbindd version 2.2.5 started. Copyright The Samba Team 2000-2001 [2002/08/12 09:12:27, 3] param/loadparm.c:init_globals(1261) Initialising global parameters [2002/08/12 09:12:27, 3] param/params.c:pm_process(577) params.c:pm_process() - Processing configuration file "/share/sys/samba/samba-2.2.5/conf/smb.conf" [2002/08/12 09:12:27, 3] param/loadparm.c:do_section(3024) Processing section "[global]" doing parameter encrypt passwords = yes doing parameter security = user doing parameter netbios name = smbserver [2002/08/12 09:12:27, 4] param/loadparm.c:handle_netbios_name(2333) handle_netbios_name: set global_myname to: SMBSERVER doing parameter comment = Red Hat Samba Server doing parameter workgroup = our_domain doing parameter ldap admin dn = "cn=Admin,dc=example,dc=org" doing parameter ldap suffix = "dc=example,dc=org" doing parameter ldap ssl = off doing parameter logon drive = U: doing parameter logon path = \\%N\profiles\%g doing parameter public = yes doing parameter browseable = yes doing parameter writeable = yes doing parameter logon script = LOGON.BAT doing parameter winbind separator = _ doing parameter winbind uid = 10000-20000 doing parameter winbind gid = 10000-20000 doing parameter winbind enum users = yes doing parameter winbind enum groups = yes [2002/08/12 09:12:27, 2] param/loadparm.c:do_section(3042) Processing section "[printers]" doing parameter comment = All printers doing parameter path = /var/spool/samba doing parameter browseable = yes doing parameter public = yes doing parameter guest ok = yes doing parameter writeable = no doing parameter printable = yes doing parameter printer admin = root [2002/08/12 09:12:27, 2] param/loadparm.c:do_section(3042) Processing section "[print$]" doing parameter comment = Printer Drivers doing parameter path = /share/sys/samba/samba-2.2.5/drivers doing parameter browseable = yes doing parameter guest ok = no doing parameter read only = yes doing parameter write list = root [2002/08/12 09:12:27, 2] param/loadparm.c:do_section(3042) Processing section "[netlogon]" doing parameter path = /share/sys/samba/samba-2.2.5/netlogon doing parameter locking = no doing parameter read only = yes doing parameter writeable = no doing parameter browseable = no [2002/08/12 09:12:27, 2] param/loadparm.c:do_section(3042) Processing section "[profiles]" doing parameter path = /share/sys/samba/samba-2.2.5/profiles doing parameter read only = no doing parameter writeable = yes doing parameter browseable = yes doing parameter guest ok = yes doing parameter create mask = 0600 doing parameter directory mask = 0700 [2002/08/12 09:12:27, 2] param/loadparm.c:do_section(3042) Processing section "[tmp]" doing parameter path = /tmp doing parameter guest ok = yes doing parameter writeable = yes [2002/08/12 09:12:27, 4] param/loadparm.c:lp_load(3472) pm_process() returned Yes [2002/08/12 09:12:27, 3] param/loadparm.c:lp_add_ipc(2011) adding IPC service IPC$ [2002/08/12 09:12:27, 3] param/loadparm.c:lp_add_ipc(2011) adding IPC service ADMIN$ [2002/08/12 09:12:27, 2] lib/interface.c:add_interface(81) added interface ip=192.168.1.35 bcast=192.168.1.255 nmask=255.255.255.0 [2002/08/12 09:12:27, 5] lib/charset.c:load_client_codepage(194) load_client_codepage: loading codepage 850. [2002/08/12 09:12:27, 5] lib/util_unistr.c:load_unicode_map(597) load_unicode_map: loading unicode map for codepage 850. [2002/08/12 09:12:27, 5] lib/util_unistr.c:load_unicode_map(597) load_unicode_map: loading unicode map for codepage ISO8859-1. [2002/08/12 09:12:27, 2] lib/interface.c:add_interface(81) added interface ip=192.168.1.35 bcast=192.168.1.255 nmask=255.255.255.0 [2002/08/12 09:12:27, 5] tdb/tdbutil.c:tdb_log(492) tdb(unknown): tdb_brlock failed (fd=5) at offset 4 rw_type=1 lck_type=13 [2002/08/12 09:12:27, 3] libsmb/namequery.c:resolve_lmhosts(768) resolve_lmhosts: Attempting lmhosts lookup for name OUR_DOMAIN<0x1b> [2002/08/12 09:12:27, 4] libsmb/namequery.c:startlmhosts(474) startlmhosts: Can't open lmhosts file /share/sys/samba/samba-2.2.5/conf/lmhosts. Error was No such file or directory [2002/08/12 09:12:27, 3] libsmb/namequery.c:resolve_wins(709) resolve_wins: Attempting wins lookup for name OUR_DOMAIN<0x1b> [2002/08/12 09:12:27, 3] libsmb/namequery.c:resolve_wins(720) resolve_wins: WINS server resolution selected and no WINS servers listed. [2002/08/12 09:12:27, 3] libsmb/namequery.c:name_resolve_bcast(658) name_resolve_bcast: Attempting broadcast lookup for name OUR_DOMAIN<0x1b> [2002/08/12 09:12:27, 3] lib/util_sock.c:open_socket_in(813) bind succeeded on port 0 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option SO_KEEPALIVE = 0 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option SO_REUSEADDR = 1 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option SO_BROADCAST = 1 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(109) Could not test socket option TCP_NODELAY. [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option IPTOS_LOWDELAY = 0 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option IPTOS_THROUGHPUT = 0 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option SO_SNDBUF = 65535 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option SO_RCVBUF = 65535 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option SO_SNDLOWAT = 1 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option SO_RCVLOWAT = 1 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option SO_SNDTIMEO = 0 [2002/08/12 09:12:27, 5] lib/util_sock.c:print_socket_options(111) socket option SO_RCVTIMEO = 0 [2002/08/12 09:12:27, 5] libsmb/nmblib.c:send_udp(741) Sending a packet of len 50 to (192.168.1.255) on port 137 [2002/08/12 09:12:27, 5] libsmb/nmblib.c:read_packet(719) Received a packet of len 62 from (192.168.1.12) port 137 [2002/08/12 09:12:27, 4] libsmb/nmblib.c:debug_nmb_packet(107) nmb packet from 192.168.1.12(137) header: id=26431 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=OUR_DOMAIN<1b> rr_type=32 rr_class=1 ttl=300000 answers 0 char `..... hex 6000C0A8010C [2002/08/12 09:12:27, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 192.168.1.12 ( 192.168.1.12 ) [2002/08/12 09:12:27, 3] lib/util_sock.c:open_socket_in(813) bind succeeded on port 0 [2002/08/12 09:12:27, 5] libsmb/nmblib.c:send_udp(741) Sending a packet of len 50 to (192.168.1.12) on port 137 [2002/08/12 09:12:29, 5] libsmb/nmblib.c:send_udp(741) Sending a packet of len 50 to (192.168.1.12) on port 137 [2002/08/12 09:12:31, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435) Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc (NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND) [2002/08/12 09:12:41, 1] nsswitch/winbindd_util.c:init_domain_list(143) Retrying startup domain sid fetch for OUR_DOMAIN [2002/08/12 09:12:41, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435) Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc (NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND) [2002/08/12 09:12:51, 1] nsswitch/winbindd_util.c:init_domain_list(143) Retrying startup domain sid fetch for OUR_DOMAIN [2002/08/12 09:12:51, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435) Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc (NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND) [2002/08/12 09:13:01, 1] nsswitch/winbindd_util.c:init_domain_list(143) Retrying startup domain sid fetch for OUR_DOMAIN [2002/08/12 09:13:01, 3] libsmb/namequery.c:resolve_lmhosts(768) resolve_lmhosts: Attempting lmhosts lookup for name OUR_DOMAIN<0x1b> [2002/08/12 09:13:01, 4] libsmb/namequery.c:startlmhosts(474) startlmhosts: Can't open lmhosts file /share/sys/samba/samba-2.2.5/conf/lmhosts. Error was No such file or directory [2002/08/12 09:13:01, 3] libsmb/namequery.c:resolve_wins(709) resolve_wins: Attempting wins lookup for name OUR_DOMAIN<0x1b> [2002/08/12 09:13:01, 3] libsmb/namequery.c:resolve_wins(720) resolve_wins: WINS server resolution selected and no WINS servers listed. [2002/08/12 09:13:01, 3] libsmb/namequery.c:name_resolve_bcast(658) name_resolve_bcast: Attempting broadcast lookup for name OUR_DOMAIN<0x1b> [2002/08/12 09:13:01, 3] lib/util_sock.c:open_socket_in(813) bind succeeded on port 0 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option SO_KEEPALIVE = 0 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option SO_REUSEADDR = 1 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option SO_BROADCAST = 1 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(109) Could not test socket option TCP_NODELAY. [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option IPTOS_LOWDELAY = 0 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option IPTOS_THROUGHPUT = 0 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option SO_SNDBUF = 65535 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option SO_RCVBUF = 65535 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option SO_SNDLOWAT = 1 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option SO_RCVLOWAT = 1 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option SO_SNDTIMEO = 0 [2002/08/12 09:13:01, 5] lib/util_sock.c:print_socket_options(111) socket option SO_RCVTIMEO = 0 [2002/08/12 09:13:01, 5] libsmb/nmblib.c:send_udp(741) Sending a packet of len 50 to (192.168.1.255) on port 137 [2002/08/12 09:13:01, 5] libsmb/nmblib.c:read_packet(719) Received a packet of len 62 from (192.168.1.12) port 137 [2002/08/12 09:13:01, 4] libsmb/nmblib.c:debug_nmb_packet(107) nmb packet from 192.168.1.12(137) header: id=19782 opcode=Query(0) response=Yes header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0 answers: nmb_name=OUR_DOMAIN<1b> rr_type=32 rr_class=1 ttl=300000 answers 0 char `..... hex 6000C0A8010C [2002/08/12 09:13:01, 2] libsmb/namequery.c:name_query(421) Got a positive name query response from 192.168.1.12 ( 192.168.1.12 ) [2002/08/12 09:13:01, 3] lib/util_sock.c:open_socket_in(813) bind succeeded on port 0 [2002/08/12 09:13:01, 5] libsmb/nmblib.c:send_udp(741) Sending a packet of len 50 to (192.168.1.12) on port 137 [2002/08/12 09:13:03, 5] libsmb/nmblib.c:send_udp(741) Sending a packet of len 50 to (192.168.1.12) on port 137 [2002/08/12 09:13:05, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435) Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc (NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND) [2002/08/12 09:13:15, 1] nsswitch/winbindd_util.c:init_domain_list(143) Retrying startup domain sid fetch for OUR_DOMAIN [2002/08/12 09:13:15, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435) Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc (NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND) [2002/08/12 09:13:25, 1] nsswitch/winbindd_util.c:init_domain_list(143) Retrying startup domain sid fetch for OUR_DOMAIN [2002/08/12 09:13:25, 3] nsswitch/winbindd_cm.c:get_connection_from_cache(435) Could not open a connection to OUR_DOMAIN for \PIPE\lsarpc (NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND) [2002/08/12 09:13:35, 1] nsswitch/winbindd_util.c:init_domain_list(143) Retrying startup domain sid fetch for OUR_DOMAIN [and so on...] Any help available would be very appreciated; thanks! Erik.
Anthony J. Breeds-Taurima
2002-Aug-13 19:01 UTC
[Samba] Winbind cannot find/connect to PDC.
On 12 Aug 2002, Erik Enge wrote:> Hi all. > > Funny thing happend: I had winbindd working, but now I can't get it back > up correctly. I'm not sure what I'm doing differently. > > Samba version 2.2.5. > > 'wbinfo -u' says "Error looking up domain users". I joined the domain > with the command: 'smbpasswd -j OUR_DOMAIN -r thepdc -U Administrator' > and this returned saying "Joined domain OUR_DOMAIN". > > Both smbd and nmbd are running, so is the ldap server if that matters. > > winbind says "NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND" but I'm really > certain what that means. I can ping the PDC, and I did join the domain. > > Here's my log.winbind when running debug level 5: > > [2002/08/12 09:12:27, 1] nsswitch/winbindd.c:main(767) > winbindd version 2.2.5 started. > Copyright The Samba Team 2000-2001 > [2002/08/12 09:12:27, 3] param/loadparm.c:init_globals(1261) > Initialising global parameters > [2002/08/12 09:12:27, 3] param/params.c:pm_process(577) > params.c:pm_process() - Processing configuration file "/share/sys/samba/samba-2.2.5/conf/smb.conf" > [2002/08/12 09:12:27, 3] param/loadparm.c:do_section(3024) > Processing section "[global]" > doing parameter encrypt passwords = yes > doing parameter security = userShouldn't this be domain? Also what do wbinfo -t wbinfo -u say? Yours Tony Jan 22-25 2003 Linux.Conf.AU linux.conf.au The Australian Linux Technical Conference!
Are you sure that winbindd (!) is running. I only get the message (Could not check secret), when winbindd is not running. If the secret is bad, i get the message (secret is bad). Bernd> -----Original Message----- > From: Anthony J. Breeds-Taurima [mailto:tony@cantech.net.au] > Sent: Friday, August 16, 2002 8:12 AM > To: Erik Enge > Cc: samba@samba.org > Subject: Re: [Samba] Winbind cannot find/connect to PDC. > > > On 14 Aug 2002, Erik Enge wrote: > > > root@cancun# bin/wbinfo -t > > Could not check secret > > Hmmm that looks bad, I think it means either your domain > membership is wrong > or wbinfo can't read you tdb. > > If it were me I would backup my current install and rebuild, > and reinstall > samba, such that I was certain that everything was compiled > at the same time. > Delete my account from the PDC and rejoin/setup samba. > > Of course that is really only possible in downtime or on an > experimental > system. > > Yours Tony > > Jan 22-25 2003 Linux.Conf.AU > linux.conf.au > The Australian Linux Technical Conference! > > -- > To unsubscribe from this list go to the following URL and read the > instructions: lists.samba.org/mailman/listinfo/samba >
Hi!> Hi all. Funny thing happend: I had winbindd working, but now I can't get it > back up correctly. I'm not sure what I'm doing differently. Samba version > 2.2.5. 'wbinfo -u' says "Error looking up domain users". I joined the > domain with the command: > 'smbpasswd -j OUR_DOMAIN -r thepdc -U Administrator' > and this returned saying "Joined domain OUR_DOMAIN". Both smbd and nmbd are > running, so is the ldap server if that matters. winbind says > "NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND" but I'm really > certain what that means. I can ping the PDC, and I did join the domain.Exactly the same happened to me! Before that I had samba version 2.2.2 working with no problem at all - including winbindd. Now e.g. wbinfo cannot 'ping' winbindd using 'wbinfo -p' command but winbindd started up (with error messages like yours though). I figured out that winbindd did not create a pipe in /tmp/.winbindd which it should do on startup. Tell me - does your winbindd do that correctly (you may need to move/delete some old /tmp/.winbindd directory before starting up the daemons)? I understand that e.g. wbinfo sends requests to winbindd itself through that pipe. Maybe there is a problem creating/using the pipe on our systems? I'm using a stripped down version of SuSE Linux 8.0 with samba built from a source rpm package. Libc version is 2.2.5 and libacl/libattr are taken from current XFS release. Thomas