Odd error message in winbind

[Andrew Bartlett]

Nir Soffer wrote:
> 
> Hello!
> 
> On a Linux machine, running Samba 2.2.4, we got this error message:
> 
> Aug  7 01:47:01 node1-mgmt winbindd[7034]: [2002/08/07 01:47:01, 0]
> rpc_client/cli_pipe.c:rpc_api_pipe(359)
> Aug  7 01:47:01 node1-mgmt winbindd[7034]:   cli_pipe: return critical
> error. Error was SUCCESS - 0
> 
> Previous to that error message, winbindd ran without fault for nearly 30
> days.

The DC 'went away'.  (Which closed the pipe, and left 0 in the error
feild - yes we need a better way do handle this...).

> After that error message, we got a few of these sequences:
> 
> Aug  8 10:19:25 node1-mgmt winbindd[7034]: [2002/08/08 10:19:25, 0]
> libsmb/cli_netlogon.c:new_cli_nt_setup_creds(209)
> Aug  8 10:19:25 node1-mgmt winbindd[7034]:   new_cli_nt_setup_creds:
> auth2 challenge failed NT_STATUS_ACCESS_DENIED
> Aug  8 10:19:25 node1-mgmt winbindd[7034]: [2002/08/08 10:19:25, 0]
> nsswitch/winbindd_cm.c:cm_get_netlogon_cli(796)
> Aug  8 10:19:25 node1-mgmt winbindd[7034]:   error connecting to domain
> password server: NT_STATUS_ACCESS_DENIED
> 
> I'm assuming something in winbindd's state got iffy, and then
> authentication failed. I don't have access to the PDC to see if maybe
> the error was caused by an event there, but I was wondering if anyone
> knows what's going on there.

It looks like the PDC has changed the machine account password on the
account, your local machine name has changed or the account on the DC
has been deleted.  Could the DC have been restored from a backup, with
'old' passwords?

Anyway, try a rejoin and see if that helps.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net