samba - Jul 2004 - winbindd caching bug?

I've had weird problems getting winbind authentication working on my 
site. I eventually cured them by sticking -n on winbindd, thus turning 
off the caching.

This was on a Redhat FC2 client authenticating with whatever domain 
servers our central IT people use. I tried the Samba that came with FC2 
and a fresh 3.0.4 release compiled from source.

  Here's what happened:

  "getent passwd fred" showed fred's passwd file entry just fine.
then
  "ssh fred@localhost" gave permission denied and disconnected.
then
  "getent passwd fred" returned nothing (except the next prompt).

  restarting winbindd and then running 'getent passwd fred' shows
fred's
passwd file entry again, and we're back to square one as above.

  This seemed to be infinitely repeatable.

  Turning off the caching with -n and it all works. "getent passwd 
fred", "ssh fred@localhost", all work, no matter how many times I
do it.

Baz
b.rowlingson AT lancs.ac.uk

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Barry Rowlingson wrote:

| I've had weird problems getting winbind authentication
| working on my site. I eventually cured them by sticking -n
| on winbindd, thus turning off the caching.
...
|
|  Here's what happened:
|
| "getent passwd fred" showed fred's passwd file entry just fine.
| then
| "ssh fred@localhost" gave permission denied and disconnected.
| then
| "getent passwd fred" returned nothing (except the next prompt).
|
| restarting winbindd and then running 'getent passwd
| fred' shows fred's  passwd file entry again, and we're
| back to square one as above.
|
| This seemed to be infinitely repeatable.
|
| Turning off the caching with -n and it all works.
| "getent passwd fred",  "ssh fred@localhost", all work, no
matter
| how many times I do it.

What version of Samba ?  Could you send me the level 10
log from winbindd ?




cheers, jerry
- ---------------------------------------------------------------------
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song"--Switchfoot
(2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFA/7rhIR7qMdg1EfYRAu3DAKDj0VUio+0zIcHUSZXcKQvYlS5WAACg5FQI
bCy4XqovxNnqdKMXlR4J5g0=pj1e
-----END PGP SIGNATURE-----