Hi all.
I'm getting mad at this.
I use winbind to authenticate users in multiple domains from AD. The
config worked well, before upgrading from 3.5.3 to 3.5.10 in Mandriva.
Now, if I 'winbind -i user.name' (so using the joined domain PERSONALE)
I get the correct info, but if I do a 'winbind -i
STUDENTI\\another.name' the answer is a 'Could not get info for user
STUDENTI\another.name'...
On other machines, the same config works well.
I already tried uninstalling samba (both -winbind and -common), removing
/etc/samba, /var/cache/samba and /var/lib/samba then reinstalling after
copying /etc/samba/smb.conf from a working machine and rejoining.
Doing a tail -f /var/log/samba/* I could see the following:
[2011/11/28 11:43:51.053242, 10]
winbindd/winbindd_cache.c:536(refresh_sequence_number)
refresh_sequence_number: PERSONALE time ok
[2011/11/28 11:43:51.053578, 10]
winbindd/winbindd_cache.c:581(refresh_sequence_number)
refresh_sequence_number: PERSONALE seq number is now 343528996
[2011/11/28 11:43:51.053681, 10]
winbindd/winbindd_cache.c:913(wcache_save_name_to_sid)
wcache_save_name_to_sid: STUDENTI\DIEGO.ZUCCATO2 ->
S-1-5-21-790525478-1035525444-682003330-86279 (NT_STATUS_OK)
[2011/11/28 11:43:51.053756, 10]
winbindd/winbindd_cache.c:935(wcache_save_sid_to_name)
wcache_save_sid_to_name: S-1-5-21-790525478-1035525444-682003330-86279
-> diego.zuccato2 (NT_STATUS_OK)
[2011/11/28 11:43:51.053805, 1]
../librpc/ndr/ndr.c:251(ndr_print_function_debug)
wbint_LookupName: struct wbint_LookupName
out: struct wbint_LookupName
type : *
type : SID_NAME_USER (1)
sid : *
sid :
S-1-5-21-790525478-1035525444-682003330-86279
result : NT_STATUS_OK
[2011/11/28 11:43:51.053997, 4]
winbindd/winbindd_dual.c:1532(fork_domain_child)
Finished processing child request 63
[2011/11/28 11:43:51.054045, 10]
winbindd/winbindd_dual.c:1548(fork_domain_child)
Writing 3532 bytes to parent
[2011/11/28 11:43:51.054113, 10] lib/events.c:183(get_timed_events_timeout)
==> log.winbindd <=[2011/11/28 11:43:51.054550, 5]
winbindd/winbindd_getpwnam.c:138(winbindd_getpwnam_recv)
Could not convert sid S-1-5-21-790525478-1035525444-682003330-86279:
NT_STATUS_UNSUCCESSFUL
[2011/11/28 11:43:51.054670, 10] winbindd/winbindd.c:655(wb_request_done)
wb_request_done[17597:GETPWNAM]: NT_STATUS_UNSUCCESSFUL
It seems my account in STUDENTI gets written to cache, but then winbind
doesn't read it back ???? And why is the name all upper case when I
wrote it lower case?
Any hints?
Tks!
BYtE,
Diego.
On 30/11/2011 08:53, NdK wrote:> Hi all. > > I'm getting mad at this. > I use winbind to authenticate users in multiple domains from AD. The > config worked well, before upgrading from 3.5.3 to 3.5.10 in Mandriva. > > Now, if I 'winbind -i user.name' (so using the joined domain PERSONALE) > I get the correct info, but if I do a 'winbind -i > STUDENTI\\another.name' the answer is a 'Could not get info for user > STUDENTI\another.name'... > > On other machines, the same config works well. > I already tried uninstalling samba (both -winbind and -common), removing > /etc/samba, /var/cache/samba and /var/lib/samba then reinstalling after > copying /etc/samba/smb.conf from a working machine and rejoining. > > Doing a tail -f /var/log/samba/* I could see the following: > [2011/11/28 11:43:51.053242, 10] > winbindd/winbindd_cache.c:536(refresh_sequence_number) > refresh_sequence_number: PERSONALE time ok > [2011/11/28 11:43:51.053578, 10] > winbindd/winbindd_cache.c:581(refresh_sequence_number) > refresh_sequence_number: PERSONALE seq number is now 343528996 > [2011/11/28 11:43:51.053681, 10] > winbindd/winbindd_cache.c:913(wcache_save_name_to_sid) > wcache_save_name_to_sid: STUDENTI\DIEGO.ZUCCATO2 -> > S-1-5-21-790525478-1035525444-682003330-86279 (NT_STATUS_OK) > [2011/11/28 11:43:51.053756, 10] > winbindd/winbindd_cache.c:935(wcache_save_sid_to_name) > wcache_save_sid_to_name: S-1-5-21-790525478-1035525444-682003330-86279 > -> diego.zuccato2 (NT_STATUS_OK) > [2011/11/28 11:43:51.053805, 1] > ../librpc/ndr/ndr.c:251(ndr_print_function_debug) > wbint_LookupName: struct wbint_LookupName > out: struct wbint_LookupName > type : * > type : SID_NAME_USER (1) > sid : * > sid : > S-1-5-21-790525478-1035525444-682003330-86279 > result : NT_STATUS_OK > [2011/11/28 11:43:51.053997, 4] > winbindd/winbindd_dual.c:1532(fork_domain_child) > Finished processing child request 63 > [2011/11/28 11:43:51.054045, 10] > winbindd/winbindd_dual.c:1548(fork_domain_child) > Writing 3532 bytes to parent > [2011/11/28 11:43:51.054113, 10] lib/events.c:183(get_timed_events_timeout) > > ==> log.winbindd <=> [2011/11/28 11:43:51.054550, 5] > winbindd/winbindd_getpwnam.c:138(winbindd_getpwnam_recv) > Could not convert sid S-1-5-21-790525478-1035525444-682003330-86279: > NT_STATUS_UNSUCCESSFUL > [2011/11/28 11:43:51.054670, 10] winbindd/winbindd.c:655(wb_request_done) > wb_request_done[17597:GETPWNAM]: NT_STATUS_UNSUCCESSFUL > > > It seems my account in STUDENTI gets written to cache, but then winbind > doesn't read it back ???? And why is the > > Any hints? > > Tks! >Noone w/ an idea? :( BYtE, Diego.