thr3ads.net - samba - [Samba] Winbind User Login Troubles [Apr 2005]

If this information is useful, please help other people find it:
Share via:

Drew Daugherty

2005-Apr-14 14:40 UTC

[Samba] Winbind User Login Troubles

I am running Samba version 3.0.9-1.3E.2 on a server that is joined to a
windows server 2003 domain using ADS security.  The samba server hosts a
share called 'files'.  I am having problems mounting this share using a
new account I set up.  getent passwd shows the information for the new
account as does wbinfo -u.   Mounting the share with the new users
account using the net use command from xp or using smbclient from the
samba server works now and then but it is not consistent.  When it fails 
I see large numbers of log entries appear in winbindd.log that state the 
user does not exist. I can mount the share with my personal domain 
account no problem.  I just switched my samba server security from 
domain to ads and added the enum users and groups entries in smb.conf 
and that is when these problems cropped up.  Thanks in advance for your 
help.

-drew

/etc/samba/smb.conf:
[global]

# workgroup = NT-Domain-Name or Workgroup-Name
    workgroup = MYDOMAIN

    winbind separator = +
    winbind cache time = 10
    winbind use default domain = Yes
    winbind enum users = yes
    winbind enum groups = yes
    template shell = /bin/bash
    template homedir = /home/%D/%U
    password server = azores.myrealm.mydomain
    security = ADS
    idmap uid = 15000-20000
    idmap gid = 15000-20000
    use sendfile = Yes
    realm = myrealm.mydomain
    client use spnego = yes
    create mask = 0774
    directory mask = 0775
   encrypt passwords = yes
   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192


    remote browse sync = 10.0.1.0/24
    remote announce = 10.0.1.0/24

    local master = no

    domain master = no

[files]
    comment = Staff Filespace
    path = /mnt/apple1/smbhome
    browseable = yes
    writable = yes


/etc/nsswitch.conf:

passwd:     files winbind
shadow:     files winbind
group:      files winbind

#hosts:     db files nisplus nis dns
hosts:      files dns wins


/var/log/samba/winbindd.log:
[2005/04/13 17:18:55, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:18:55, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:18:55, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:18:55, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:18:55, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
[2005/04/13 17:27:15, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user '<NewUser>' does not exist
...
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'ADMINISTRATOR' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'administrator' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'ADMINISTRATOR' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'administrator' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'ADMINISTRATOR' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'administrator' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'administrator' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'ADMINISTRATOR' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'administrator' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'ADMINISTRATOR' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'administrator' does not exist
[2005/04/13 18:07:07, 1] nsswitch/winbindd_user.c:winbindd_getpwnam(161)
   user 'ADMINISTRATOR' does not exist
[2005/04/13 18:09:30, 1] nsswitch/winbindd_group.c:winbindd_getgrgid(381)
   could not lookup sid
[2005/04/13 18:09:30, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(248)
   could not lookup sid S-1-5-21-774361187-2347313055-767287078-1129
[2005/04/13 18:09:30, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(248)
   could not lookup sid S-1-5-21-774361187-2347313055-767287078-1139
[2005/04/13 18:09:30, 1] nsswitch/winbindd_group.c:winbindd_getgrgid(381)
   could not lookup sid
[2005/04/13 18:09:30, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(248)
   could not lookup sid S-1-5-21-774361187-2347313055-767287078-1114
[2005/04/13 18:09:30, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(248)
   could not lookup sid S-1-5-21-774361187-2347313055-767287078-1105
[2005/04/13 18:09:30, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(248)
   could not lookup sid S-1-5-21-774361187-2347313055-767287078-1142
[2005/04/13 18:09:30, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(248)
   could not lookup sid S-1-5-21-774361187-2347313055-767287078-1113
[2005/04/13 18:09:30, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(248)
   could not lookup sid S-1-5-21-774361187-2347313055-767287078-1148
[2005/04/13 18:09:30, 1] nsswitch/winbindd_user.c:winbindd_getpwuid(248)
   could not lookup sid S-1-5-21-774361187-2347313055-767287078-1135

Volker Dose

2005-Apr-14 16:06 UTC

head link

[Samba] Re: Winbind User Login Troubles

Dear Drew,


Drew Daugherty wrote:
> I am running Samba version 3.0.9-1.3E.2 on a server that is joined to a
> windows server 2003 domain using ADS security.  The samba server hosts a
> share called 'files'.  I am having problems mounting this share
using a
> new account I set up.  getent passwd shows the information for the new
> account as does wbinfo -u.   Mounting the share with the new users
> account using the net use command from xp or using smbclient from the
> samba server works now and then but it is not consistent.  When it fails
> I see large numbers of log entries appear in winbindd.log that state the
> user does not exist. I can mount the share with my personal domain
> account no problem.  I just switched my samba server security from
> domain to ads and added the enum users and groups entries in smb.conf
> and that is when these problems cropped up.  Thanks in advance for your
> help.
I am not sure, but this seems to me like a similar problem I had the last
days. I set up a samba 3.0.13 member-Server in a w2k3s-Actice Directory
domain and everything seemed to work fine:

wbinfo -t said, the secret is good,
wbinfo -u and -g gave me the list of user and groups
getent passwd or group gave me also teh lists

But wbinfo -n <group> dig not work as expected and wbinfo -r
<USERNAME>,
which should give me the list of Windows-Groups the user belongs to, gave
me most of the time (but not everytime - I was really screwed up) an error.

After debugging and reading postings in mailinglists, I tried the following
option in smb.conf:
        
        client schannel = no

and everything worked like a charme.

I would also advise you to look at the last announcement from the
samba-group, posted at tuesday this week:

Release Announcements
====================
Common bugs fixed in 3.0.14 include:

~  o Compatibility issues between Winbind and Windows 2003 SP1
     domain controllers (*2k3sp1*). 


Kind regards,
Volker Dose

Possibly Parallel Threads

Search for more maybe matching threads

samba - Apr 2005 - Winbind User Login Troubles

[Samba] Winbind User Login Troubles

[Samba] Re: Winbind User Login Troubles

Possibly Parallel Threads