AD-Shares not accessible with 3.0.31

View: New views
3 Messages — Rating Filter:   Alert me  

AD-Shares not accessible with 3.0.31

by Jens Nissen :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Starting with version 3.0.31, it is not possible to access shares on a
Windows Server 2000 SP4, even though it is possible to join the domain
controlled by that Server.
The same configuration worked "fine" (for one hour) with 3.0.30.
What has changed? What do I need to configure or compile differently to
get back to 3.0.2x behaviour?

The commands
#> wbinfo -u
#> wbinfo -g
#> wbinfo -a DOMAIN\\Administrator%PASS
#> wbinfo -t
#> net ads testjoin -s /path_to_config
all work fine.

Replacing the 3.0.31 files one by one with 3.0.30 files again gives me a
somewhat working system, so it it must be something with 3.0.31.

Not my day :-(

The error log looks like this:

[2008/07/18 15:34:43, 10] smbd/sesssetup.c:reply_spnego_kerberos(364)
   Mapped to [DOMAIN] (using PAC)
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_alloc(131)
   Finding user DOMAIN\Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(75)
   Trying _Get_Pwnam(), username as lowercase is candeo\administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(83)
   Trying _Get_Pwnam(), username as given is DOMAIN\Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(93)
   Trying _Get_Pwnam(), username as uppercase is DOMAIN\ADMINISTRATOR
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(102)
   Checking combinations of 0 uppercase letters in candeo\administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(108)
   Get_Pwnam_internals didn't find user [DOMAIN\Administrator]!
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_alloc(131)
   Finding user Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(75)
   Trying _Get_Pwnam(), username as lowercase is administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(83)
   Trying _Get_Pwnam(), username as given is Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(93)
   Trying _Get_Pwnam(), username as uppercase is ADMINISTRATOR
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(102)
   Checking combinations of 0 uppercase letters in administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(108)
   Get_Pwnam_internals didn't find user [Administrator]!
[2008/07/18 15:34:43, 10] nsswitch/winbindd.c:process_request(321)
   process_request: request fn PING
[2008/07/18 15:34:43, 3] nsswitch/winbindd_misc.c:winbindd_ping(470)
   [ 2360]: ping
[2008/07/18 15:34:43, 1] smbd/sesssetup.c:reply_spnego_kerberos(439)
   Username DOMAIN\Administrator is invalid on this system
[2008/07/18 15:34:43, 3] smbd/error.c:error_packet_set(106)
   error packet at smbd/sesssetup.c(444) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2008/07/18 15:34:43, 5] lib/util.c:show_msg(484)
[2008/07/18 15:34:43, 5] lib/util.c:show_msg(494)
   size=35
   smb_com=0x73
   smb_rcls=109
   smb_reh=0
   smb_err=49152
   smb_flg=136
   smb_flg2=51201
   smb_tid=0
   smb_pid=65279
   smb_uid=101
   smb_mid=33152
   smt_wct=0
   smb_bcc=0



[global]
         dos charset = ISO-8859-1
         unix charset = ISO-8859-1
         display charset = ISO-8859-1
         workgroup = DOMAIN
         realm = DOMAIN.TEST
         server string = intradisk NASdrive (IP:%$(IPADDR))
         interfaces = ixp0
         security = ADS
         allow trusted domains = No
         password server = sbs2000.candeo.test
         private dir = /var/lib/adsamba/private
         passdb backend = tdbsam
         guest account = samba
         log level = 6
         log file = /var/log/adsamba/smblog.ad
         max log size = 0
         name resolve order = wins bcast host
         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
SO_RCVBUF=8192 SO_SNDBUF=8192
         load printers = No
         show add printer wizard = No
         preferred master = No
         local master = No
         domain master = No
         wins server = 192.168.1.4
         idmap uid = 1000-60000
         idmap gid = 1000-60000
         winbind enum users = Yes
         winbind enum groups = Yes
         winbind offline logon = Yes
         admin users = DOMAIN\\Administrator
         ea support = Yes
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: AD-Shares not accessible with 3.0.31

by Volker Lendecke :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On Fri, Jul 18, 2008 at 03:50:21PM +0200, Jens Nissen wrote:
> Starting with version 3.0.31, it is not possible to access shares on a
> Windows Server 2000 SP4, even though it is possible to join the domain
> controlled by that Server.
> The same configuration worked "fine" (for one hour) with 3.0.30.
> What has changed? What do I need to configure or compile differently to
> get back to 3.0.2x behaviour?

Is it possible that you did not exchange libnss_winbind.so
in /lib?

Volker


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

attachment0 (196 bytes) Download Attachment

Re: AD-Shares not accessible with 3.0.31

by Jens Nissen :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Oops, something similar: I refreshed the ld.so.cache, now things work fine.

Version 3.0.31 is even able to do a trick, none of the predecessors
could do: If Samba started while the DC was down, it was not possible to
connect to the Samba shares without restarting Samba when the DC was
online.
3.0.31 solves this extremely ancient issue - I'm completely enthusiastic
(for the moment)!!

Many thanks,

Jens

Volker Lendecke wrote:

> On Fri, Jul 18, 2008 at 03:50:21PM +0200, Jens Nissen wrote:
>> Starting with version 3.0.31, it is not possible to access shares on a
>> Windows Server 2000 SP4, even though it is possible to join the domain
>> controlled by that Server.
>> The same configuration worked "fine" (for one hour) with 3.0.30.
>> What has changed? What do I need to configure or compile differently to
>> get back to 3.0.2x behaviour?
>
> Is it possible that you did not exchange libnss_winbind.so
> in /lib?
>
> Volker

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
LightInTheBox - Buy quality products at wholesale price