samba - Mar 2013 - problems with samba upgrade from 3.5.4 to 3.6.9

Hi @ all,
we use samba as a fileserver on CentOS  and an OpenLDAP server on Ubuntu 10.04.
The samba server shared only files, so we can access with the win7 clients (and
OpenLDAP credentials) to the files  on the linux environment.

So after upgrade we don't can connected us to the samba share. I have tested
the connection with the tool smbclient "smblcient -L <servername> -U
<ldapuser>" and returned the error "session setup failed:
NT_STATUS_INTERNAL_DB_CORRUPTION".

I had read something about new security features, and in the most articles I had
found problems with winbind and ADS connectivity. But we don't use winbind
or else, we use only the linux ldap to authenticate.

The domainSID and localSID and userSID are matched to the SambaDomainSID in my
openLDAP.
I have checked this with the commands:
- net getdomainsid
- net getlocalsid
- pdbedit -v hhofmann

So I hope you can help me, thanks!

Regards,
Henry Hofmann

I'm experiencing the same/similar problem
the difference being it that ldap-backend users are ok, only 
root fails with NT_STATUS_INTERNAL_DB_CORRUPTION

but I also get warnings, not sure if related

WARNING: The "idmap backend" option is deprecated
WARNING: The "idmap uid" option is deprecated
WARNING: The "idmap gid" option is deprecated

I'm on rhel 6.3, samba-3.6.9-151.el6.x86_64, 
openldap-servers-2.4.23-26.el6_3.2.x86_64

regards


On 03/08/13 10:09, NOC-Postkorb wrote:
> Hi @ all,
> we use samba as a fileserver on CentOS  and an OpenLDAP server on Ubuntu
10.04. The samba server shared only files, so we can access with the win7
clients (and OpenLDAP credentials) to the files  on the linux environment.
>
> So after upgrade we don't can connected us to the samba share. I have
tested the connection with the tool smbclient "smblcient -L
<servername> -U <ldapuser>" and returned the error
"session setup failed: NT_STATUS_INTERNAL_DB_CORRUPTION".
>
> I had read something about new security features, and in the most articles
I had found problems with winbind and ADS connectivity. But we don't use
winbind or else, we use only the linux ldap to authenticate.
>
> The domainSID and localSID and userSID are matched to the SambaDomainSID in
my openLDAP.
> I have checked this with the commands:
> - net getdomainsid
> - net getlocalsid
> - pdbedit -v hhofmann
>
> So I hope you can help me, thanks!
>
> Regards,
> Henry Hofmann