samba4 alpha16 windows clients issue after alpha15 migration and samba config problems
david at otlayi.com
david at otlayi.com
Sun Jan 22 18:49:34 MST 2012
As a follow up, I recompiled with the latest git, no change.
After a few hours, my ssh logins via AD fails. This is the second time
it's happened, rebooting samba makes it work again instantly. My samba
ticket is NOT expired, klist succeeds, wbinfo -u and getent passwd pull
all my AD users instantly.
The log entries when I try to login:
--
Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): [pamh:
0x7fc7c3540610] ENTER: pam_sm_authenticate (flags: 0x0001)
Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): getting
password (0x00000181)
Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): Verify user
'my-username' with password '******'
Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): PAM config:
krb5_ccache_type 'FILE'
Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): enabling
krb5 login flag
Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): enabling
request for a FILE krb5 ccache
Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): request
wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_SYSTEM_ERR (4),
NTSTATUS: NT_STATUS_ACCESS_DENIED, Error message was: Access denied
Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): internal
module error (retval = PAM_SYSTEM_ERR(4), user = 'my-username')
Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): [pamh:
0x7fc7c3540610] LEAVE: pam_sm_authenticate returning 4 (PAM_SYSTEM_ERR)
Jan 22 20:38:15 cs1228 sshd[17637]: Failed password for my-username
from 5.6.7.8 port 61890 ssh2
After rebooting samba, then I can login and the successful log is:
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): [pamh:
0x7fb3bb609610] ENTER: pam_sm_authenticate (flags: 0x0001)
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): getting
password (0x00000181)
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): Verify user
'my-username' with password '******'
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): PAM config:
krb5_ccache_type 'FILE'
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): enabling
krb5 login flag
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): enabling
request for a FILE krb5 ccache
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): request
wbcLogonUser succeeded
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): user
'my-username' granted access
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): Returned
user was 'MYWORKGROUP\my-username'
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): [pamh:
0x7fb3bb609610] LEAVE: pam_sm_authenticate returning 0 (PAM_SUCCESS)
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:account): [pamh:
0x7fb3bb609610] ENTER: pam_sm_acct_mgmt (flags: 0x0000)
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:account): user
'MYWORKGROUP\my-username' granted access
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:account): [pamh:
0x7fb3bb609610] LEAVE: pam_sm_acct_mgmt returning 0 (PAM_SUCCESS)
Jan 22 20:42:13 cs1228 sshd[17705]: Accepted password for my-username
from 5.6.7.8 port 62012 ssh2
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:setcred): [pamh:
0x7fb3bb609610] ENTER: pam_sm_setcred (flags: 0x0002)
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:setcred):
PAM_ESTABLISH_CRED not implemented
Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:setcred): [pamh:
0x7fb3bb609610] LEAVE: pam_sm_setcred returning 0 (PAM_SUCCESS)
Jan 22 20:42:14 cs1228 sshd[17705]: pam_winbind(sshd:session): [pamh:
0x7fb3bb609610] ENTER: pam_sm_open_session (flags: 0x0000)
Jan 22 20:42:14 cs1228 sshd[17705]: pam_winbind(sshd:session): [pamh:
0x7fb3bb609610] LEAVE: pam_sm_open_session returning 0 (PAM_SUCCESS)
Jan 22 20:42:14 cs1228 sshd[17705]: pam_unix(sshd:session): session
opened for user MYWORKGROUP\my-username by (uid=0)
Jan 22 20:42:14 cs1228 sshd[17734]: pam_winbind(sshd:setcred): [pamh:
0x7fb3bb609610] ENTER: pam_sm_setcred (flags: 0x0002)
Jan 22 20:42:14 cs1228 sshd[17734]: pam_winbind(sshd:setcred):
PAM_ESTABLISH_CRED not implemented
Jan 22 20:42:14 cs1228 sshd[17734]: pam_winbind(sshd:setcred): [pamh:
0x7fb3bb609610] LEAVE: pam_sm_setcred returning 0 (PAM_SUCCESS)
More information about the samba-technical
mailing list