Sorry: Samba 3.2.8-0.26 running on Intel FC9.
On Mar 8, 2009, at 2:08 PM, Hugo Mallinson wrote:
> Hi, we've had a machine happily authenticating to an ADS domain for
> about a year now, and it's recently stopped working (possibly due to
> changes in the domain or a samba upgrade, unfortunately I'm not
> sure). We're using an ldap idmap backend running on the local machine.
>
> Now though, new domain users can't log in. Running "wbinfo -i
> newuser" returns an error. However users can use wbinfo -a to
> authenticate, and previously registered users can still log in fine.
> The problem seems to be with the sid->uid mapping. I can manually
> add an LDAP entry for the new user's sid and make up a uid and the
> login works as normal. Specifically "wbinfo --allocate-uid" says
it
> cannot allocate a uid.
>
> Could someone please help?
>
> smb.conf:
>
> [global]
> workgroup = IFM
> interfaces = bond0 lo
> bind interfaces only = yes
> password server = mlpc-serv-dc1.eng.cam.ac.uk
> realm = IFM.ENG.CAM.AC.UK
> security = domain
> winbind separator = +
> template homedir = /home/%U
> template shell = /bin/bash
> winbind use default domain = true
> wins server = 129.169.8.25
> domain master = no
> local master = no
> preferred master = no
> os level = 0
>
> idmap domains = IFM
> idmap config IFM:default = yes
> idmap config IFM:backend = ldap
> idmap config IFM:ldap_base_dn =
> ou=Idmap,dc=dial,dc=ifm,dc=eng,dc=cam,dc=ac,dc=uk
> idmap config IFM:ldap_url = ldap://mlpc-autoid1.eng.cam.ac.uk/
> idmap config IFM:range = 100000 - 1500000
> idmap config IFM:ldap_user_dn =
> cn=Manager,dc=dial,dc=ifm,dc=eng,dc=cam,dc=ac,dc=uk
>
> idmap alloc backend = ldap
> idmap alloc config:ldap_base_dn =
> ou=Idmap,dc=dial,dc=ifm,dc=eng,dc=cam,dc=ac,dc=uk
> idmap alloc config:ldap_url = ldap://mlpc-
> autoid1.eng.cam.ac.uk/
> idmap alloc config:range = 100000 - 1500000
> idmap alloc config:ldap_user_dn =
> cn=Manager,dc=dial,dc=ifm,dc=eng,dc=cam,dc=ac,dc=uk
>
>
> winbind enum users = yes
> winbind enum groups = yes
>
>
> winbindd.log:
>
> input: wbinfo -i newuser
>
> output:
> [2009/03/08 14:05:51, 6] winbindd/winbindd.c:new_connection(717)
> accepted socket 20
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/204670
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/204581
> [2009/03/08 14:05:51, 10] winbindd/winbindd.c:process_request(402)
> process_request: request fn INTERFACE_VERSION
> [2009/03/08 14:05:51, 3] winbindd/
> winbindd_misc.c:winbindd_interface_version(757)
> [ 4115]: request interface version
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/204460
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/204374
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/204285
> [2009/03/08 14:05:51, 10] winbindd/winbindd.c:process_request(402)
> process_request: request fn WINBINDD_PRIV_PIPE_DIR
> [2009/03/08 14:05:51, 3] winbindd/
> winbindd_misc.c:winbindd_priv_pipe_dir(790)
> [ 4115]: request location of privileged pipe
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/204140
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/204095
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/204051
> [2009/03/08 14:05:51, 6] winbindd/winbindd.c:new_connection(717)
> accepted socket 21
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/203881
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/203801
> [2009/03/08 14:05:51, 2] winbindd/winbindd.c:remove_client(761)
> final write to client failed: Broken pipe
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/203672
> [2009/03/08 14:05:51, 10] winbindd/winbindd.c:process_request(402)
> process_request: request fn GETPWNAM
> [2009/03/08 14:05:51, 3] winbindd/
> winbindd_user.c:winbindd_getpwnam(373)
> [ 4115]: getpwnam sk604
> [2009/03/08 14:05:51, 10] winbindd/winbindd_dual.c:async_request(125)
> Sending request to child pid 4091 (domain=IFM)
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/203497
> [2009/03/08 14:05:51, 10] lib/events.c:event_add_timed(130)
> Added timed event "async_request_timeout": b8dcee48
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/203411
> [2009/03/08 14:05:51, 10] lib/events.c:timed_event_destructor(65)
> Destroying timed event b8dcee48 "async_request_timeout"
> [2009/03/08 14:05:51, 10] winbindd/
> winbindd_cache.c:cache_retrieve_response(2468)
> Retrieving response for pid 4091
> [2009/03/08 14:05:51, 10] winbindd/winbindd_dual.c:async_request(125)
> Sending request to child pid 4091 (domain=IFM)
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/202689
> [2009/03/08 14:05:51, 10] lib/events.c:event_add_timed(130)
> Added timed event "async_request_timeout": b8dcf970
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/202609
> [2009/03/08 14:05:51, 10] lib/events.c:timed_event_destructor(65)
> Destroying timed event b8dcf970 "async_request_timeout"
> [2009/03/08 14:05:51, 10] winbindd/
> winbindd_cache.c:cache_retrieve_response(2468)
> Retrieving response for pid 4091
> [2009/03/08 14:05:51, 10] winbindd/winbindd_dual.c:async_request(125)
> Sending request to child pid 4093 (domain='')
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/201931
> [2009/03/08 14:05:51, 10] lib/events.c:event_add_timed(130)
> Added timed event "async_request_timeout": b8dd4800
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 104/201160
> [2009/03/08 14:05:51, 10] lib/events.c:timed_event_destructor(65)
> Destroying timed event b8dd4800 "async_request_timeout"
> [2009/03/08 14:05:51, 10] winbindd/
> winbindd_cache.c:cache_retrieve_response(2468)
> Retrieving response for pid 4093
> [2009/03/08 14:05:51, 5] winbindd/
> winbindd_idmap.c:winbindd_sid2uid_recv(289)
> sid2uid returned an error
> [2009/03/08 14:05:51, 5] winbindd/
> winbindd_user.c:getpwsid_sid2uid_recv(293)
> Could not query uid for user IFM\sk604
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 103/661130
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 103/659990
> [2009/03/08 14:05:51, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 103/659895
> [2009/03/08 14:05:51, 2] winbindd/winbindd.c:remove_client(761)
> final write to client failed: Broken pipe
>
>
>
>
> input: wbinfo --allocate-uid
>
> [2009/03/08 14:06:21, 6] winbindd/winbindd.c:new_connection(717)
> accepted socket 20
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/929055
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/928969
> [2009/03/08 14:06:21, 10] winbindd/winbindd.c:process_request(402)
> process_request: request fn INTERFACE_VERSION
> [2009/03/08 14:06:21, 3] winbindd/
> winbindd_misc.c:winbindd_interface_version(757)
> [ 4116]: request interface version
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/928836
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/928791
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/928715
> [2009/03/08 14:06:21, 10] winbindd/winbindd.c:process_request(402)
> process_request: request fn WINBINDD_PRIV_PIPE_DIR
> [2009/03/08 14:06:21, 3] winbindd/
> winbindd_misc.c:winbindd_priv_pipe_dir(790)
> [ 4116]: request location of privileged pipe
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/928584
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/928539
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/928495
> [2009/03/08 14:06:21, 6] winbindd/winbindd.c:new_connection(717)
> accepted socket 21
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/928325
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/928214
> [2009/03/08 14:06:21, 2] winbindd/winbindd.c:remove_client(761)
> final write to client failed: Broken pipe
> [2009/03/08 14:06:21, 10] winbindd/winbindd.c:process_request(402)
> process_request: request fn ALLOCATE_UID
> [2009/03/08 14:06:21, 10] winbindd/winbindd_dual.c:async_request(125)
> Sending request to child pid 4093 (domain='')
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/927997
> [2009/03/08 14:06:21, 10] lib/events.c:event_add_timed(130)
> Added timed event "async_request_timeout": b8dcf970
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/927895
> [2009/03/08 14:06:21, 10] lib/events.c:timed_event_destructor(65)
> Destroying timed event b8dcf970 "async_request_timeout"
> [2009/03/08 14:06:21, 10] winbindd/
> winbindd_cache.c:cache_retrieve_response(2468)
> Retrieving response for pid 4093
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/927361
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/927311
> [2009/03/08 14:06:21, 10] lib/events.c:get_timed_events_timeout(304)
> timed_events_timeout: 73/926128
> [2009/03/08 14:06:21, 2] winbindd/winbindd.c:remove_client(761)
> final write to client failed: Broken pipe
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba