samba - Oct 2005 - Samba vs ADS problems

Hello Everyone
This samba server was working perfectly without problems.
Running as an Domain member vs Win2K ADS
One day it stopped working? All that happened 5 days ago was a change of 
the administrator/root password
We adjusted the wbinfo ?set-auth-user towards the new password. But 
nothing have worked since.
install:/ # wbinfo -V
Version 3.0.13-1.1-SUSE
What might be wrong when the following happen?
wbinfo -r TARP+hl
10000
10001
10010

install:/var/log/samba # wbinfo -n TARP+hl
S-1-5-21-220523388-1957994488-854245398-2811 User (1)
install:/var/log/samba # wbinfo 
--user-sids=S-1-5-21-220523388-1957994488-854245398-2811
Could not get group SIDs for user SID 
S-1-5-21-220523388-1957994488-854245398-2811

Try to add a group to the ACL
install:/var/samba # setfacl -d -m 'g:tarp+domain admins:rwx' preInstall
setfacl: Option -m: Invalid argument near character 3

Try to add a user to the ACL
install:/var/samba # setfacl -d -m 'u:tarp+dhj:rwx' preinstall
no errors

I hope anyone can help :D
Regards
Daniel Jensen

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Daniel Jensen wrote:

| This samba server was working perfectly without problems.
| Running as an Domain member vs Win2K ADS
| One day it stopped working? All that happened 5 days ago
| was a change of the administrator/root password

No hotfixes applied to the dc?  What does a level 10
debug log from winbindd say about the failure. (hint: grep for
NT_STATUS_ in the log file).









cheers, jerry
====================================================================Alleviating
the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"There's an anonymous coward in all of us."              
--anonymous
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDTltWIR7qMdg1EfYRAgpWAJ4noCEH6O0Ce2UXcqu6/sAk3bWZlQCgtw8+
YhENA7SgBg45Qddf1xKsVBs=sSCM
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Daniel Hindbo Jensen wrote:

| After installing SuSE 10.0 on another desktop PC which
| is running samba 3.0.20 (not 3.0.20a) it made the same error
| as the older samba version running on the live server
|
| However some small changes have occured in the
| wbinfo feedback... I can now lookup:
|
| # wbinfo --user-sids=S-1-5-21-220523388-1957994488-854245398-2749
...
| # wbinfo --user-domgroups=S-1-5-21-220523388-1957994488-854245398-2749
...
|
| However the groupname lookup for the user still returns the same
|
| IT02:/var/log/samba # wbinfo -r tarp+dhj
| 17000

...
| So is this all down to the version of samba I use?

winbindd itself was rewritten drastically in Samba 3.0.20
in order to providing more scalability.  There are rpc
infrastructure changes coming in 3.0.21 (pre1 is due out
on Monday) for better interoperabilty with newer MS
updates

| I have attached all the log files in the directory
| /var/log/samba + the samba smb.conf

Unfortunately, you didn't run winbindd at level 10.  That
is the critical one.  Run winbindd -d 10 manually.  And
then grab /var/log/samba/log.{winbindd,wb-*}





cheers, jerry
====================================================================Alleviating
the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"There's an anonymous coward in all of us."              
--anonymous
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDT7osIR7qMdg1EfYRAq3nAJoCalg19lxR8WLvPPktocgXV1BrCQCff0jd
d+1yMomkIeD8Y8++xM4sawM=qqrM
-----END PGP SIGNATURE-----