Дорофеев Михаил Сергеевич
2004-Feb-20 12:28 UTC
[Samba] Telnet to samba box does NOT work: wb_getgrgid: failed to locate gid == 1000
Hi all!
This is getting strange: 3d installation - the same problem...
This is the log: (pay attention to the LAST line)
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.debug] Plain-text
authentication for user DorofeevMS returned NT_STATUS_OK (PAM: 0)
Feb 20 12:10:58 as09-tmn pam_winbind[452]: [ID 614614 auth.notice] user
'DorofeevMS' granted acces
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.debug] [2004/02/20
12:10:58, 5] nsswitch/winbindd.c:winbind_client_read(465)
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.debug] read failed
on sock 28, pid 452: EOF
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] [2004/02/20
12:10:58, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(122)
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] [ 452]:
getpwnam DorofeevMS
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] [2004/02/20
12:10:58, 3] nsswitch/winbindd_rpc.c:name_to_sid(290)
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] rpc:
name_to_sid name=DorofeevMS
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] [2004/02/20
12:10:58, 3] nsswitch/winbindd_rpc.c:name_to_sid(299)
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] name_to_sid
[rpc] DorofeevMS for domain TMN
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] [2004/02/20
12:10:58, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(122)
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] [ 452]:
getpwnam DorofeevMS
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] [2004/02/20
12:10:58, 3] nsswitch/winbindd_rpc.c:name_to_sid(290)
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] rpc:
name_to_sid name=DorofeevMS
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] [2004/02/20
12:10:58, 3] nsswitch/winbindd_rpc.c:name_to_sid(299)
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] name_to_sid
[rpc] DorofeevMS for domain TMN
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] [2004/02/20
12:10:58, 3] nsswitch/winbindd_group.c:winbindd_getgrgid(332)
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.info] [ 452]:
getgrgid 1000
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.debug] [2004/02/20
12:10:58, 4] nsswitch/winbindd_acct.c:wb_getgrgid(544)
Feb 20 12:10:58 as09-tmn winbindd[273]: [ID 702911 daemon.debug] wb_getgrgid:
failed to locate gid == 1000
When I Telnet/FTP to my samba box it authenticates me and gives NO shell prompt.
Here is the smb conf file:
[global]
workgroup = TMN
realm = TMN.TRANSNEFT.RU
server string = AS09-TMN Samba server (running Samba 3.0.1)
security = DOMAIN
password server = msg01-tmn dc01-tmn
algorithmic rid base = 100000
log level = winbind:10
syslog = 7
syslog only = Yes
name resolve order = host lmhosts wins bcast
ldap ssl = no
idmap uid = 1000-2000
idmap gid = 1000-2000
template homedir = /export/home
template shell = /bin/bash
winbind separator = +
winbind use default domain = Yes
All nedded templates are mentioned....
Getent passwd and getent group successfully list domain users and groups.
AND, getent group lists getent group 1000
Domain Users:x:1000:TsInter............................ -many
users-...............
What might be the problem ????
Thanks ALL in advance!!!
Sinserely yours,
Mike
P.S. Kinda lonnnng troubleshooting ;)
Gerald (Jerry) Carter
2004-Feb-20 15:08 UTC
[Samba] Telnet to samba box does NOT work: wb_getgrgid: failed to locate gid == 1000
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ???????? ?????? ????????? wrote: | wb_getgrgid: failed to locate gid == 1000 This is winbindd looking in its local list of group. The failure message is normal in your case. The problem is somewhere else. Probably an interaction with pam_unix in /etc/pam.d/telnet cheers, jerry - ---------------------------------------------------------------------- Hewlett-Packard ------------------------- http://www.hp.com SAMBA Team ---------------------- http://www.samba.org GnuPG Key ---- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFANiLhIR7qMdg1EfYRAvTCAKCRxnbFjPokjjj4E2q95Py9Ck+FvACgqaMO sU3y4vBK5Q947GAXtj8Hkv8=VfEE -----END PGP SIGNATURE-----
Possibly Parallel Threads
- user granted access, but still no shell prompt
- PAM (winbind?) auth still does NOT work on Solaris 9
- idmap uid range 10000-20000: pam_winbind does NOT wor k ?
- idmap uid range 10000-20000: pam_winbind does NOT work ?
- wb_getgrgid: failed to locate gid == 10002