samba - Oct 2005 - Winbind is DISCONNECTED after restart

I'm experiencing a strange problem on one RHEL4 system with Samba 3.0.20a. 
After restarting the Samba and Winbind services, the domain connection 
doesn't work any longer:

# wbinfo --sequence
HA02 : 1
BUILTIN : 1
CRT : DISCONNECTED

Before restarting, I got:

# wbinfo --sequence
CRT : 254

The strange thing is that if I remove /etc/samba/secrets.tdb before 
(re)starting Samba, this problem goes away. Another really strange thing 
is that things works correctly on an identical machine. The PDC is running 
"Windows Server 2003 3790 Service Pack 1".

Any ideas? Our smb.conf looks like:

[global]
    workgroup = CRT
    password server = *
    security = domain
    template shell = /bin/bash
    winbind use default domain = yes
    winbind separator = +
    encrypt passwords = yes
    log level = 2
    idmap uid = 16777216-33554431
    idmap gid = 16777216-33554431

-- 
Peter ?strand		Chief Developer
Cendio			www.thinlinc.com
Teknikringen 3		www.cendio.se
583 30 Link?ping        Phone: +46-13-21 46 00

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Peter ?strand wrote:
|
| I'm experiencing a strange problem on one RHEL4 system
| with Samba 3.0.20a. After restarting the Samba
| and Winbind services, the domain connection doesn't
| work any longer:
|
| # wbinfo --sequence
| HA02 : 1
| BUILTIN : 1
| CRT : DISCONNECTED
|
| Before restarting, I got:
|
| # wbinfo --sequence
| CRT : 254

What does a level 10 debug log from winbindd say?  grep
for the string "SEQUENCE".

| The strange thing is that if I remove /etc/samba/secrets.tdb
| before (re)starting Samba, this problem goes away.
| Another really strange thing is that things works
| correctly on an identical machine. The PDC is
| running "Windows Server 2003 3790 Service Pack 1".

removing secrets.tdb deletes the machine trust account
password so winbindd has no membership in the domain
any more.  It's like a user that fogets his or her password.

|
| Any ideas? Our smb.conf looks like:
|
| [global]
|    workgroup = CRT
|    password server = *
|    security = domain

You read the WHATSNEW relating to security=domain and
active directory right?





cheers, jerry
====================================================================Alleviating
the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"There's an anonymous coward in all of us."              
--anonymous
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDTlwYIR7qMdg1EfYRAg7IAKDC7O3Igc9WvKt3/fLxR7n/U4bPOgCgjdbj
ncv0JhLuvoATulJgYdUxFis=eYUx
-----END PGP SIGNATURE-----