search for: netsamlogon_cache

I think we're suffering from bug 8641 at the moment: https://bugzilla.samba.org/show_bug.cgi?id=8641 where the netsamlogon_cache.tdb entries are not expiring. We use AD groups for our (redhat) server auth, and also use server-side group auth for NFS (with the --manage-gids flag). So if a user is not in a group on the server, they're denied access to files as per group permissions. However, winbind is using netsamlogo...

...eck to see if the user is in the group is working fine, but for some other users, it returns me an error (but the user is in the group !)I am using for this check the wbinfo_group.pl file. What i have noticed is that if i start winbind without cache, everything seems to be ok. Also, if i delete the netsamlogon_cache.tdb file and restart winbind, everything seems to be ok. Do you have a idea of what could have generated this situation ? By the way, in my context could it be a solution to clear from time to time the netsamlogon_cache.tdb file (i've seen in a previous post http://groups.google.fr/group/linu...

All, I wonder if someone can give me an idea what the file "netsamlogon_cache.tdb" contains... as I have noticed that I can be added to a group, and access will not appear on the Unix side for a good deal of time... but if I stop Winbind, remove the file "netsamlogon_cache.tdb", and re-start everything, it will then work. Can anyone tell me what the purpose o...

Hello, according to 'man smb.conf': Default: winbind cache time = 300 I have not changed it in smb.conf, but when I remove some user from some group, command "groups DOMAIN+user" still shows that user belongs to the group even after a few hours after removing the user from that group. Any ideas why? samba 3.0.15pre2. Regards, Nerijus

Hello, Apparently, I did a stupid thing today. I used apt-get on my Debian Woody system to upgrade my Samba packages from 3.0.2 to 3.0.6. Since doing so, all my users are prompted for a password when trying to access shares. Even just listing the IPC$, Windows XP systems prompt for user name and password. Windows 98 machines prompt for password. None are successful. I believe

Hi All: I have problems with maintain tdb files. From samba doc, these files are = classified into persistent and temporary. From the man page of smbd, = these file are classified into persistent and not. However, there are = some files no need to backup but need to be persistent = (netsamlogon_cache.tdb), and some files need to backup but not need to = be persisten (registry.tdb). There are also some .dat files also = mentioned in samba FAQ that need to be deleted under particular case = (change ip address). How can I maintain these tdb/dat files? Which file needed to be deleted = when samba...

...land >> > Still nothing. I also restarted samba on AD machine and winbind on > first machine (member) > There was a pause when running getent passwd but 'foo' is still returned. > > Ok, found it. I did lsof on winbind and found 'foo' entry in /var/cache/samba/netsamlogon_cache.tdb with tdbtool. Next I do: net cache samlogon list net cache samlogon delete <SID> Now getent passwd returns new name. The difference between two unix members was I connected to share o the first one (where the problem was) and did not connect on second node, so there was no old name...

...ent that is using AD groups to control ssh access to servers. The client is running a lot of different bugfix and build versions in the 3.6 branch all running on RHEL using rpm's. I have seen this issue cropping up in the ML from time to time and most of the solutions are to rm /var/lib/samba/netsamlogon_cache.tdb. Is there perhaps another way to tell winbind to invalidate the cache (or ignore it all together)? I would prefer to not rm this file from a nightly cron (which is the current solution in place) I have petitioned the client to update the samba version to samba 4, but it does not look like th...

I have a problem with Samba: I want to make trust between two Samba domains. I have setup the trust on the DOMAINB server then on the Samba DOMAINA server "net rpc trustdom establish DOMAINB" I then get the following: Password: [entered password] Could not connect to server SERVERB [this is the PDC for the DOMAINB domain] Trust to domain DOMAINB established When I then try

...gt; > > > The client is running a lot of different bugfix and build versions in the > > 3.6 branch all running on RHEL using rpm's. > > > > I have seen this issue cropping up in the ML from time to time and most > of > > the solutions are to rm /var/lib/samba/netsamlogon_cache.tdb. > > > > Is there perhaps another way to tell winbind to invalidate the cache (or > > ignore it all together)? > > > > I would prefer to not rm this file from a nightly cron (which is the > > current solution in place) > > > > I have petitioned th...

...he command `/usr/sbin/useradd -g guestsmb -c "<Samba tmpwacc Temp Guest Account>" -s /bin/false tmpwacc' gave 1 [2005/01/04 15:47:15, 0] auth/auth_util.c:make_server_info_info3(1134) make_server_info_info3: pdb_init_sam failed! [2005/01/04 15:47:15, 0] libsmb/samlogon_cache.c:netsamlogon_cache_store(123) netsamlogon_cache_store: cannot open netsamlogon_cache.tdb for write! [2005/01/04 15:47:15, 2] auth/auth.c:check_ntlm_password(310) check_ntlm_password: Authentication for user [tmpwacc] -> [tmpwacc] FAILED with error NT_STATUS_NO_SUCH_USER ...when running that command from a...

...idea, how I get into that group. The group 10010 is wrong! The group 10374 is missing! After deleting some cache files from winbind, the output of wbinfo looks more like the net command: # /etc/init.d/winbind stop Shutting down Samba WINBIND daemon done # cd /var/lib/samba # mv netsamlogon_cache.tdb netsamlogon_cache.tdb.OLD # mv winbindd_cache.tdb winbindd_cache.tdb.OLD # /etc/init.d/winbind start Starting Samba WINBIND daemon done # wbinfo -r thenneri | sort 10003 10005 10006 10007 10008 10009 10010 10011 10374 The group 10010 is sti...

Skipped content of type multipart/mixed

On Wed, 31 May 2017 11:36:56 +0200 aluno3--- via samba <samba at lists.samba.org> wrote: > root at host:~# su DEV2+dev2user1000 > > DEV2+dev2user1000 at host:/$ whoami > DEV2+dev2user1000 > > DEV2+dev2user1000 at host:/$ echo "testpermissions" >> /testfile > > DEV2+dev2user1000 at host:/$ cat /testfile > testpermissions > >

Hello Samba team ! I'm network administrator in a french high school where I store my user/group ID using rfc2307. My client stations use Winbind to query rfc2307 attributes. Each new years, as all my students move to another class, almost all my user's gid are updated in AD. This gid is very important in my network because pam_mount mount only the share corresponding the to user's

...2:12:11, 1] libsmb/clientgen.c:cli_rpc_pipe_close(387) cli_rpc_pipe_close: cli_close failed on pipe \NETLOGON, fnum 0x800b to machine s06b-fin-dc02.finance.int. Error was SUCCESS - 0 /var/log/samba/wb-FINANCE.log <== [2008/05/29 12:25:27, 0] lib/util_tdb.c:tdb_log(662) tdb(/var/cache/samba/netsamlogon_cache.tdb): tdb_rec_read bad magic 0xd9fee666 at offset=27920 If I look at ps ax I get about 20 winbind entries When we try to access the only share on the box everything seems to hang... we can't even do and ls -al Then I restart winbind and everything frees up. It seems as if winbind is hanging...

Hello subscribers, we have a problem with keeping our group memberships up to date. If we e.g. remove a group membership from a user, we don?t see any change when trying "wbinfo -r j.doe" or "groups j.doe". Even after hours there ist no update. We also tried restarting smb, nmb, winbindd. Anyone has an idea? Some additional info: |samba/winbind-version: 3.2.0-17.fc9

...'t find files in my user home folder with a bad > > gid. The problem seems to appear only at the pam_mount stage. > > Strange, pam mount works for me and I do not change the primaryGroupID > > > Thanks James for the tips ! I will try to understand what contain the > > netsamlogon_cache.tdb file. > > I doubt that it is your problem. (whoever James is ?) > James give me some advice in private. He say that he have the same problem and deleting the netsamlogon_cache.tdb solve it. But it don't give me his Samba version and if it change the primaryGroupID. Thanks again.

...at port 445 [2004/10/12 17:41:39, 3] auth/auth_util.c:make_server_info_info3(1114) User bronasek does not exist, trying to add it [2004/10/12 17:41:39, 0] auth/auth_util.c:make_server_info_info3(1122) make_server_info_info3: pdb_init_sam failed! [2004/10/12 17:41:39, 0] libsmb/samlogon_cache.c:netsamlogon_cache_store(123) netsamlogon_cache_store: cannot open netsamlogon_cache.tdb for write! [2004/10/12 17:41:39, 2] auth/auth.c:check_ntlm_password(312) check_ntlm_password: Authentication for user [bronasek] -> [bronasek] FAILED with error NT_STATUS_NO_SUCH_USER [2004/10/12 17:41:39, 3] rpc_server/s...

...to the "*" domain config that uses tdb, the mapping works. wbinfo and tdb file display/contain the same mapping: #idmap config AGENZIA : backend = rid #idmap config AGENZIA : range = 8000-20000 # systemctl stop winbind smbd nmbd # rm /var/cache/samba/gencache.tdb /var/cache/samba/netsamlogon_cache.tdb \ /var/lib/samba/account_policy.tdb /var/lib/samba/group_mapping.tdb \ /var/lib/samba/winbindd_cache.tdb /var/lib/samba/winbindd_cache.tdb.bak \ /var/lib/samba/winbindd_idmap.tdb /var/lib/samba/private/idmap2.tdb # systemctl start winbind smbd nmbd # getent passwd 'AGENZIA\lorenam...