Samba 4: WBC_ERR_DOMAIN_NOT_FOUND error

Matthias Dieter Wallnöfer mdw at samba.org
Thu Oct 28 00:54:32 MDT 2010


Hi Aaron,

regarding the s4 winbind development - I hope I'm right :) : much has 
been implemented by Andrew Bartlett and Kai Blin but there are also 
other contributors which are part of the team. Probably they could help 
you more than me.

Greets,
Matthias

Aaron wrote:
> I can respect that -- I just wanted to make sure the error I was 
> seeing wasn't due to a misconfiguration on my part.
>
> Who handles the s4 winbind development btw?
>
> Thanks for your help, I appreciate it.
>
> a.
>
> On 10/27/2010 1:22 PM, Matthias Dieter Wallnöfer wrote:
>> Well, as I say, s4 winbind is still experimental and has it's bugs. 
>> But if it does it's job beside this errors I would be satisfied for 
>> the moment. We keep improving it - but not such fast as other 
>> components.
>>
>> Regarding the error - I hope that someone more familiar with the 
>> internal s4 winbind code could start some investigations - I 
>> personally haven't worked very much there.
>>
>> Greets,
>> Matthias
>>
>> Aaron wrote:
>>> Hi Matthias,
>>>
>>> I've installed S4 and provisioned a fresh domain, it's the only DC.
>>>
>>> This error shows up in the logs, from what I can see this occurs 
>>> when cron runs a command as a unix user.  I haven't had any issues 
>>> using unix or AD users, everything seems to work properly, and I'm 
>>> able to log in via both types of user account -- that being said, 
>>> this error is showing up regularly in my logs.
>>>
>>> As I mentioned, the wbinfo command also shows the same error when I 
>>> use the all-domains parameter .. doesn't stop me from using it from 
>>> what I've seen, but I'm reading this as "I have misconfigured 
>>> something non-obvious".
>>>
>>>
>>> On 10/27/2010 9:26 AM, Matthias Dieter Wallnöfer wrote:
>>>> Aaron,
>>>>
>>>> well if you've only installed s4 and provisioned the domain then 
>>>> for sure you don't make use of them. But is this error 
>>>> (WBC_ERR_DOMAIN_NOT_FOUND) only displayed under certain commands 
>>>> (eg --trusted-domains) and do otherwise the logins work? Or do work 
>>>> only some user/password combinations and others not?
>>>>
>>>> Please explain this a bit more.
>>>>
>>>> Aaron wrote:
>>>>> Hi Matthias,
>>>>>
>>>>> Not intentionally, admittedly I'm learning as I go.
>>>>>
>>>>> What settings control that?
>>>>>
>>>>> On 10/26/2010 11:50 PM, Matthias Dieter Wallnöfer wrote:
>>>>>> Do you make use of trusted domains? This is still not supported 
>>>>>> by s4's winbind.
>>>>>>
>>>>>> Greets,
>>>>>> Matthias
>>>>>>
>>>>>> Aaron wrote:
>>>>>>> On 10/24/2010 6:39 PM, Aaron wrote:
>>>>>>>> I followed http://wiki.samba.org/index.php/Samba4/HOWTO
>>>>>>>> and everything listed works, however wbinfo reports the following:
>>>>>>>>
>>>>>>>> agreengrass at primal:~$ wbinfo --own-domain
>>>>>>>> GREENBTN
>>>>>>>>
>>>>>>>> agreengrass at primal:~$ wbinfo --all-domains
>>>>>>>> failed to call wbcListTrusts: WBC_ERR_DOMAIN_NOT_FOUND
>>>>>>>>
>>>>>>>> agreengrass at primal:~$ wbinfo --trusted-domains
>>>>>>>> failed to call wbcListTrusts: WBC_ERR_DOMAIN_NOT_FOUND
>>>>>>>> Could not list trusted domains
>>>>>>>>
>>>>>>>>
>>>>>>>> I added http://wiki.samba.org/index.php/Samba4/Winbind
>>>>>>>> last night,  and authentication seems to be working, but this 
>>>>>>>> auth error started at the same time.
>>>>>>>>
>>>>>>>> Oct 24 10:15:01 primal su[4869]: pam_winbind(su): valid_user: 
>>>>>>>> wbcGetpwnam gave WBC_ERR_DOMAIN_NOT_FOUND
>>>>>>>>
>>>>>>>>
>>>>>>>> All of the host and ping tests report back correctly, I'm at a 
>>>>>>>> loss.
>>>>>>>>
>>>>>>>> winbind reports as pingable, and -u works properly.  getent works.
>>>>>>>>
>>>>>>>> It looks like this pam error is occuring because winbind can't 
>>>>>>>> find the user listed (in this case logcheck) in AD.
>>>>>>>>
>>>>>>>> Does anyone have any suggestions?
>>>>>>>>
>>>>>>> Anyone else able to reproduce this or seen it?  There's little 
>>>>>>> about this error in google, but I can't be the only one having 
>>>>>>> it happen.
>>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>
>>>
>>
>
>



More information about the samba-technical mailing list