I had a test machine up and running Samba, joining an AD domain, and set up with winbind... when I ran "getent passwd" it would list all the local users, and all the domain users. I could also log in as a domain user without any problem. So, I made an image of the hard drive, and copied it to 7 other machines. Now, those 7 are having a strange problem. I changed the names and IP's of all those machines, changed the /etc/hosts to reflect the new IP and name, and change the smb.conf file to reflect the new name (NetBIOS name). Now, as soon as it boots, I can log in with root, restart winbind and do "getent passwd", and it works... but after I try to log in again (as any user), winbind dies. The syslog says: May 27 13:46:44 linux10 winbindd[5495]: [2004/05/27 13:46:44, 0] lib/fault.c:fault_report(36) May 27 13:46:44 linux10 winbindd[5495]: =============================================================== May 27 13:46:44 linux10 winbindd[5495]: [2004/05/27 13:46:44, 0] lib/fault.c:fault_report(37) May 27 13:46:44 linux10 winbindd[5495]: INTERNAL ERROR: Signal 11 in pid 5495 (3.0.2-6.3E) May 27 13:46:44 linux10 winbindd[5495]: Please read the appendix Bugs of the Samba HOWTO collection May 27 13:46:44 linux10 winbindd[5495]: [2004/05/27 13:46:44, 0] lib/fault.c:fault_report(39) May 27 13:46:44 linux10 winbindd[5495]: =============================================================== May 27 13:46:44 linux10 winbindd[5495]: [2004/05/27 13:46:44, 0] lib/util.c:smb_panic(1422) May 27 13:46:44 linux10 winbindd[5495]: PANIC: internal error May 27 13:46:44 linux10 winbindd[5495]: [2004/05/27 13:46:44, 0] lib/util.c:smb_panic(1430) May 27 13:46:44 linux10 winbindd[5495]: BACKTRACE: 10 stack frames: May 27 13:46:44 linux10 winbindd[5495]: #0 winbindd(smb_panic+0x13f) [0x80cb96f] May 27 13:46:44 linux10 winbindd[5495]: #1 winbindd [0x80b7428] May 27 13:46:44 linux10 winbindd[5495]: #2 /lib/i686/libc.so.6 [0xb73b0d38] May 27 13:46:44 linux10 winbindd[5495]: #3 winbindd(winbindd_pam_auth+0x5fe) [0x807aaee] May 27 13:46:44 linux10 winbindd[5495]: #4 winbindd(strftime+0x14bc) [0x806d6d8] May 27 13:46:44 linux10 winbindd[5495]: #5 winbindd(winbind_process_packet+0x2f) [0x806da2f] May 27 13:46:44 linux10 winbindd[5495]: #6 winbindd(strftime+0x2197) [0x806e3b3] May 27 13:46:44 linux10 winbindd[5495]: #7 winbindd(main+0x43e) [0x806e97e] May 27 13:46:44 linux10 winbindd[5495]: #8 /lib/i686/libc.so.6(__libc_start_main+0xc7) [0xb739db77] May 27 13:46:44 linux10 winbindd[5495]: #9 winbindd(chroot+0x35) [0x806cdf1] May 27 13:46:44 linux10 winbindd[5495]: May 27 13:46:44 linux10 pam_winbind[5501]: read from socket failed! May 27 13:46:44 linux10 pam_winbind[5501]: internal module error (retval = 3, user = `root' I've done some searches on google, but haven't found anything specific... Any suggestions? Shannon ____________________________ Shannon Johnson Network Support Specialist / Systems Administrator Dept. of Mechanical and Nuclear Engineering 224 Reber Building University Park, PA 16802 Phone: (814) 865-8267 ____________________________
On Thu, May 27, 2004 at 01:51:46PM -0400, Shannon Johnson wrote:> I had a test machine up and running Samba, joining an AD domain, and set > up with winbind... when I ran "getent passwd" it would list all the > local users, and all the domain users. I could also log in as a domain > user without any problem. So, I made an image of the hard drive, and > copied it to 7 other machines. Now, those 7 are having a strange > problem. I changed the names and IP's of all those machines, changed the > /etc/hosts to reflect the new IP and name, and change the smb.conf file > to reflect the new name (NetBIOS name). Now, as soon as it boots, I can > log in with root, restart winbind and do "getent passwd", and it > works... but after I try to log in again (as any user), winbind dies. > The syslog says:What version of Samba please ? Jeremy.
Version 3.0.2-6.3E (default for Red Hat Enterprise 3) ____________________________ Shannon Johnson Network Support Specialist / Systems Administrator Dept. of Mechanical and Nuclear Engineering 224 Reber Building University Park, PA 16802 Phone: (814) 865-8267 ____________________________> -----Original Message----- > From: Jeremy Allison [mailto:jra@samba.org] > Sent: Thursday, May 27, 2004 2:02 PM > To: Shannon Johnson > Cc: samba@lists.samba.org > Subject: Re: [Samba] Ghost Image + Winbind = Panic > > On Thu, May 27, 2004 at 01:51:46PM -0400, Shannon Johnson wrote: > > I had a test machine up and running Samba, joining an AD domain, andset> > up with winbind... when I ran "getent passwd" it would list all the > > local users, and all the domain users. I could also log in as adomain> > user without any problem. So, I made an image of the hard drive, and > > copied it to 7 other machines. Now, those 7 are having a strange > > problem. I changed the names and IP's of all those machines, changedthe> > /etc/hosts to reflect the new IP and name, and change the smb.conffile> > to reflect the new name (NetBIOS name). Now, as soon as it boots, Ican> > log in with root, restart winbind and do "getent passwd", and it > > works... but after I try to log in again (as any user), winbinddies.> > The syslog says: > > What version of Samba please ? > > Jeremy.
Oh, I forgot to say that after I ghosted the HD, I left the domain and destroyed the kerberos ticket... then did the obligatory "kinit user@DOMAIN" and "net ads join -U user"... all without a problem. Do I need to change the SID even if it's joined as a different machine name? If so, how would I do that? ____________________________ Shannon Johnson Network Support Specialist / Systems Administrator Dept. of Mechanical and Nuclear Engineering 224 Reber Building University Park, PA 16802 Phone: (814) 865-8267 ____________________________> -----Original Message----- > From: Kevin Kallsen [mailto:kallsen@e101.com] > Sent: Thursday, May 27, 2004 2:10 PM > To: samba@lists.samba.org > Subject: RE: [Samba] Ghost Image + Winbind = Panic > > You may need to change the sid?? > > -----Original Message----- > From: samba-bounces+kallsen=e101.com@lists.samba.org > [mailto:samba-bounces+kallsen=e101.com@lists.samba.org] On Behalf Of > Jeremy > Allison > Sent: Thursday, May 27, 2004 2:02 PM > To: Shannon Johnson > Cc: samba@lists.samba.org > Subject: Re: [Samba] Ghost Image + Winbind = Panic > > On Thu, May 27, 2004 at 01:51:46PM -0400, Shannon Johnson wrote: > > I had a test machine up and running Samba, joining an AD domain, andset> > up with winbind... when I ran "getent passwd" it would list all the > > local users, and all the domain users. I could also log in as adomain> > user without any problem. So, I made an image of the hard drive, and > > copied it to 7 other machines. Now, those 7 are having a strange > > problem. I changed the names and IP's of all those machines, changedthe> > /etc/hosts to reflect the new IP and name, and change the smb.conffile> > to reflect the new name (NetBIOS name). Now, as soon as it boots, Ican> > log in with root, restart winbind and do "getent passwd", and it > > works... but after I try to log in again (as any user), winbinddies.> > The syslog says: > > What version of Samba please ? > > Jeremy. > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba
On Thu, May 27, 2004 at 02:07:16PM -0400, Shannon Johnson wrote:> Version 3.0.2-6.3E (default for Red Hat Enterprise 3)Please re-test with 3.0.4 or 3.0.5pre1 as there have been changes made in this area. Jeremy.
I upgraded to Samba 3.0.4 (I used an RPM for Red Hat 9, even though I'm using Red Hat Enterprise... it installed with no errors...). I'm getting a different error now. When I start winbind, the syslog says: May 27 14:50:37 linux10 winbindd[5345]: Kinit failed: Preauthentication failed May 27 14:50:50 linux10 winbindd[5345]: [2004/05/27 14:50:50, 0] libads/kerberos.c:ads_kinit_password(136) May 27 14:50:50 linux10 winbindd[5345]: kerberos_kinit_password HOST/linux10@MNELABS.MNE.PSU.EDU failed: Preauthentication failed May 27 14:50:53 linux10 winbindd[5345]: [2004/05/27 14:50:53, 0] libsmb/cliconnect.c:cli_session_setup_spnego(756) I've tried leaving the domain, but it won't let me, giving me the same error. Also I've destroyed the Kerberos tickets, and did the "kinit" again, then tried to re-join the domain. It says it joined, and updated the old account...? Shannon ____________________________ Shannon Johnson Network Support Specialist / Systems Administrator Dept. of Mechanical and Nuclear Engineering 224 Reber Building University Park, PA 16802 Phone: (814) 865-8267 ____________________________> -----Original Message----- > From: Jeremy Allison [mailto:jra@samba.org] > Sent: Thursday, May 27, 2004 2:11 PM > To: Shannon Johnson > Cc: Jeremy Allison; samba@lists.samba.org > Subject: Re: [Samba] Ghost Image + Winbind = Panic > > On Thu, May 27, 2004 at 02:07:16PM -0400, Shannon Johnson wrote: > > Version 3.0.2-6.3E (default for Red Hat Enterprise 3) > > Please re-test with 3.0.4 or 3.0.5pre1 as there have been changes > made in this area. > > Jeremy.