samba - Jul 2005 - wbinfo -u does not work PLEASE HELP : (

Linux ES 3
with samba 3.09
latest patches to date
Windows 2000 domain running in mixed mode.

wbinfo -u gives me nothing   ******* THE PROBLEM!!!!!!!!!!!

wbinfo -g gives me internal groups
>wbinfo -g
BUILTIN\System Operators
BUILTIN\Replicators
BUILTIN\Guests
BUILTIN\Power Users
BUILTIN\Print Operators
BUILTIN\Administrators
BUILTIN\Account Operators
BUILTIN\Backup Operators
BUILTIN\Users

/etc/pam.d/login
#%PAM-1.0
auth       required     pam_securetty.so
auth       sufficient   pam_winbind.so
auth sufficient         pam_unix.so use_first_pass
auth       required     pam_stack.so service=system-auth
auth       required     pam_nologin.so
account sufficient      pam_winbind.so
account    required     pam_stack.so service=system-auth
password   required     pam_stack.so service=system-auth
session    required     pam_stack.so service=system-auth
session    optional     pam_console.so
~


I can "net rpc join -U "Domain admin account%password" fine
net rpc getsid works
smbclient -L "hostname"

Password:
Anonymous login successful
Domain=[BMI] OS=[Unix] Server=[Samba 3.0.9-1.3E.3]

        Sharename       Type      Comment
        ---------       ----      -------
        homes           Disk      Home Directories
        IPC$            IPC       IPC Service (osrf-server)
        ADMIN$          IPC       IPC Service (osrf-server)
Anonymous login successful
Domain=[BMI] OS=[Unix] Server=[Samba 3.0.9-1.3E.3]

        Server               Comment
        ---------            -------
        OSRF-SERVER          osrf-server
        VALHALLA

        Workgroup            Master
        ---------            -------
        BMI                  VALHALLA
[root@hostname etc]#

/etc/samba/smb.conf
[global]

# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = BMI

# server string is the equivalent of the NT Description field
   server string = osrf-server
	netbios name = osrf-server
 log file = /var/log/samba/%m.log
 max log size = 50
security = domain
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
name resolve order = wins lmhosts bcast
wins server = "WINS SERVER ADDRESS"
template shell = /bin/sh
template homedir = /tmp
template primary group = "Domain Users"
password server = valhalla

#hosts deny = all
hosts allow = "Network IP address" 127.
interfaces = eth0 lo



#============================ Share Definitions
=============================[homes]
   comment = Home Directories
   browseable = yes
   guest OK = yes
   writable = yes

-Ian

--- Ian Miller <imiller@bsd.uchicago.edu> wrote:
> Linux ES 3
> with samba 3.09
> latest patches to date
> Windows 2000 domain running in mixed mode.
> 
> wbinfo -u gives me nothing   ******* THE PROBLEM!!!!!!!!!!!
> 
> wbinfo -g gives me internal groups
-- snip --
> I can "net rpc join -U "Domain admin account%password" fine
> net rpc getsid works
--snip --

Note - I am a newbie regarding samba so you can take my advice with a
large grain of salt.

When I setup Samba using Domain authentication to an NT based domain,
I had to also issue this command:
  wbinfo --set-auth-user=domainacct%password

I know that this is advised against in this post:
  http://lists.samba.org/archive/samba/2003-October/076034.html

But we have an NT domain with restrict anonymous, so it worked for
us.

On a related note, I also had to make sure the account I setup for
samba access to the domain had a name and password that did not
contain any special characters like &\@ -- however a '-' (hyphen)
was
ok.

- Linda Ruiz :)

For my non-geek friends:
Friends don't email friends .exe or .com files.  So don't open those
types of attachments!!
For my geek friends:
Adopt a newbie....