Hi all, since three weeks ago, whenever one of our Linux client gets rebooted, it can't get access to a W2K domain anymore. Everything is working, nothing is changed in the configs, the Linux machines are simply rebooted. Does anyone know whether tehre is a security update or so on w2K that causes this? Another strange thing is that once in a while for an unknown reason loggin in to the linux box works again and 10 minutes later it stops without touching the box. On the domain controller I get in the event viewer: The session setup from the computer LNXSRV failed to authenticate. The name of the account referenced in the security database is LNXSRV$. The following error occurred: Access is denied. On the linux side I get: # wbinfo --sequence PEAK4S : 1 BUILTIN : 1 PEAKADILLY : DISCONNECTED # wbinfo -D PEAKADILLY Name : PEAKADILLY Alt_Name : PEAKADILLY.LOCAL SID : S-1-5-21-725345543-813497703-839522115 Active Directory : Yes Native : No Primary : Yes Sequence : -1 # wbinfo -u Error looking up domain users # wbinfo -g BUILTIN\System Operators BUILTIN\Replicators BUILTIN\Guests BUILTIN\Power Users BUILTIN\Print Operators BUILTIN\Administrators BUILTIN\Account Operators BUILTIN\Backup Operators BUILTIN\Users Any idea anyone? Regards, Leen Toelen
Please follow this thread: Subject = "[Samba] wbinfo can not convert User names and Group name to S ID" -----Original Message----- From: Leen Toelen [mailto:toelen@gmail.com] Sent: Friday, August 26, 2005 12:14 PM To: samba@lists.samba.org Subject: [Samba] Samba clients fail after reboot Hi all, since three weeks ago, whenever one of our Linux client gets rebooted, it can't get access to a W2K domain anymore. Everything is working, nothing is changed in the configs, the Linux machines are simply rebooted. Does anyone know whether tehre is a security update or so on w2K that causes this? Another strange thing is that once in a while for an unknown reason loggin in to the linux box works again and 10 minutes later it stops without touching the box. On the domain controller I get in the event viewer: The session setup from the computer LNXSRV failed to authenticate. The name of the account referenced in the security database is LNXSRV$. The following error occurred: Access is denied. On the linux side I get: # wbinfo --sequence PEAK4S : 1 BUILTIN : 1 PEAKADILLY : DISCONNECTED # wbinfo -D PEAKADILLY Name : PEAKADILLY Alt_Name : PEAKADILLY.LOCAL SID : S-1-5-21-725345543-813497703-839522115 Active Directory : Yes Native : No Primary : Yes Sequence : -1 # wbinfo -u Error looking up domain users # wbinfo -g BUILTIN\System Operators BUILTIN\Replicators BUILTIN\Guests BUILTIN\Power Users BUILTIN\Print Operators BUILTIN\Administrators BUILTIN\Account Operators BUILTIN\Backup Operators BUILTIN\Users Any idea anyone? Regards, Leen Toelen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Jerry Carter (from Samba) picked up on the thread and is testing 3.0.20 to see if it works. The only thing we did was bring up a AD-PDC that does not include the August 9th security fix from MS. While we can access our shares now the wbinfo commands do not work 100%. I believe this is simply due to our secondary DC that still has the Aug 9th fix in it is queried/answers first. As for your second question, I can't answer it. Maybe someone else would be able to give you the 411. -----Original Message----- From: Leen Toelen [mailto:toelen@gmail.com] Sent: Friday, August 26, 2005 12:38 PM To: Kevin Wilson Cc: samba@lists.samba.org Subject: Re: [Samba] Samba clients fail after reboot Hi, in the thread a solution is not mentioned. Did you roll back the update on the w2k box, or change the samba confi. On a sidenote, is it better to use security = ads and configure kerberos, or still use security = domain and use the net rpc commands? Regards, Leen On 8/26/05, Kevin Wilson <Kevin.Wilson@comtrol.com> wrote:> Please follow this thread: > > Subject = "[Samba] wbinfo can not convert User names and Group name to SID"> > -----Original Message----- > From: Leen Toelen [mailto:toelen@gmail.com] > Sent: Friday, August 26, 2005 12:14 PM > To: samba@lists.samba.org > Subject: [Samba] Samba clients fail after reboot > > > Hi all, > > since three weeks ago, whenever one of our Linux client gets rebooted, > it can't get access to a W2K domain anymore. Everything is working, > nothing is changed in the configs, the Linux machines are simply > rebooted. Does anyone know whether tehre is a security update or so on > w2K that causes this? Another strange thing is that once in a while > for an unknown reason loggin in to the linux box works again and 10 > minutes later it stops without touching the box. > > > On the domain controller I get in the event viewer: > The session setup from the computer LNXSRV failed to authenticate. The > name of the account referenced in the security database is LNXSRV$. > The following error occurred: > Access is denied. > > On the linux side I get: > > # wbinfo --sequence > PEAK4S : 1 > BUILTIN : 1 > PEAKADILLY : DISCONNECTED > > # wbinfo -D PEAKADILLY > Name : PEAKADILLY > Alt_Name : PEAKADILLY.LOCAL > SID : S-1-5-21-725345543-813497703-839522115 > Active Directory : Yes > Native : No > Primary : Yes > Sequence : -1 > > # wbinfo -u > Error looking up domain users > > # wbinfo -g > BUILTIN\System Operators > BUILTIN\Replicators > BUILTIN\Guests > BUILTIN\Power Users > BUILTIN\Print Operators > BUILTIN\Administrators > BUILTIN\Account Operators > BUILTIN\Backup Operators > BUILTIN\Users > > Any idea anyone? > > Regards, > Leen Toelen > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba >
Yep, and you will sometimes succeed and sometimes fail. Just be sure to stop all the services, do the join then start all the services in their proper order and that usually allows you to pull a good list. -----Original Message----- From: Leen Toelen [mailto:toelen@gmail.com] Sent: Friday, August 26, 2005 12:55 PM To: Kevin Wilson Cc: samba@lists.samba.org Subject: Re: [Samba] Samba clients fail after reboot Hi, I remove the security update from out w2k pdc, and rebooted it. After I remove the linux client from the domain, do a net join (which succeeds), the linux client shows up again in the domain. wbinfo -u gets an "Ertror looking up domain users" again. Regards, Leen On 8/26/05, Leen Toelen <toelen@gmail.com> wrote:> Hi, > > in the thread a solution is not mentioned. Did you roll back the > update on the w2k box, or change the samba confi. > > On a sidenote, is it better to use security = ads and configure > kerberos, or still use security = domain and use the net rpc commands? > > Regards, > Leen > > On 8/26/05, Kevin Wilson <Kevin.Wilson@comtrol.com> wrote: > > Please follow this thread: > > > > Subject = "[Samba] wbinfo can not convert User names and Group name to SID"> > > > -----Original Message----- > > From: Leen Toelen [mailto:toelen@gmail.com] > > Sent: Friday, August 26, 2005 12:14 PM > > To: samba@lists.samba.org > > Subject: [Samba] Samba clients fail after reboot > > > > > > Hi all, > > > > since three weeks ago, whenever one of our Linux client gets rebooted, > > it can't get access to a W2K domain anymore. Everything is working, > > nothing is changed in the configs, the Linux machines are simply > > rebooted. Does anyone know whether tehre is a security update or so on > > w2K that causes this? Another strange thing is that once in a while > > for an unknown reason loggin in to the linux box works again and 10 > > minutes later it stops without touching the box. > > > > > > On the domain controller I get in the event viewer: > > The session setup from the computer LNXSRV failed to authenticate. The > > name of the account referenced in the security database is LNXSRV$. > > The following error occurred: > > Access is denied. > > > > On the linux side I get: > > > > # wbinfo --sequence > > PEAK4S : 1 > > BUILTIN : 1 > > PEAKADILLY : DISCONNECTED > > > > # wbinfo -D PEAKADILLY > > Name : PEAKADILLY > > Alt_Name : PEAKADILLY.LOCAL > > SID : S-1-5-21-725345543-813497703-839522115 > > Active Directory : Yes > > Native : No > > Primary : Yes > > Sequence : -1 > > > > # wbinfo -u > > Error looking up domain users > > > > # wbinfo -g > > BUILTIN\System Operators > > BUILTIN\Replicators > > BUILTIN\Guests > > BUILTIN\Power Users > > BUILTIN\Print Operators > > BUILTIN\Administrators > > BUILTIN\Account Operators > > BUILTIN\Backup Operators > > BUILTIN\Users > > > > Any idea anyone? > > > > Regards, > > Leen Toelen > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/listinfo/samba > > >
Hi Leen, I have the same problem you have with samba and the DISCONNECTED domain (http://lists.samba.org/archive/samba/2005-August/110078.html). I wonder if you have find a solution. Best regards, Xavi Carol | ICR Adventus Systems Tel: 902 411 100 | E-mail: xcarol@icr.es | www.icr.es