samba4 alpha16 windows clients issue after alpha15 migration and samba config problems

david at otlayi.com david at otlayi.com
Sun Jan 22 18:49:34 MST 2012


 As a follow up, I recompiled with the latest git, no change.

 After a few hours, my ssh logins via AD fails.  This is the second time 
 it's happened, rebooting samba makes it work again instantly.  My samba 
 ticket is NOT expired, klist succeeds, wbinfo -u and getent passwd pull 
 all my AD users instantly.

 The log entries when I try to login:
 --
 Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): [pamh: 
 0x7fc7c3540610] ENTER: pam_sm_authenticate (flags: 0x0001)
 Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): getting 
 password (0x00000181)
 Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): Verify user 
 'my-username' with password '******'
 Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): PAM config: 
 krb5_ccache_type 'FILE'
 Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): enabling 
 krb5 login flag
 Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): enabling 
 request for a FILE krb5 ccache
 Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): request 
 wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_SYSTEM_ERR (4), 
 NTSTATUS: NT_STATUS_ACCESS_DENIED, Error message was: Access denied
 Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): internal 
 module error (retval = PAM_SYSTEM_ERR(4), user = 'my-username')
 Jan 22 20:38:13 cs1228 sshd[17637]: pam_winbind(sshd:auth): [pamh: 
 0x7fc7c3540610] LEAVE: pam_sm_authenticate returning 4 (PAM_SYSTEM_ERR)
 Jan 22 20:38:15 cs1228 sshd[17637]: Failed password for my-username 
 from 5.6.7.8 port 61890 ssh2


 After rebooting samba, then I can login and the successful log is:

 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): [pamh: 
 0x7fb3bb609610] ENTER: pam_sm_authenticate (flags: 0x0001)
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): getting 
 password (0x00000181)
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): Verify user 
 'my-username' with password '******'
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): PAM config: 
 krb5_ccache_type 'FILE'
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): enabling 
 krb5 login flag
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): enabling 
 request for a FILE krb5 ccache
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): request 
 wbcLogonUser succeeded
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): user 
 'my-username' granted access
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): Returned 
 user was 'MYWORKGROUP\my-username'
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:auth): [pamh: 
 0x7fb3bb609610] LEAVE: pam_sm_authenticate returning 0 (PAM_SUCCESS)
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:account): [pamh: 
 0x7fb3bb609610] ENTER: pam_sm_acct_mgmt (flags: 0x0000)
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:account): user 
 'MYWORKGROUP\my-username' granted access
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:account): [pamh: 
 0x7fb3bb609610] LEAVE: pam_sm_acct_mgmt returning 0 (PAM_SUCCESS)
 Jan 22 20:42:13 cs1228 sshd[17705]: Accepted password for my-username 
 from 5.6.7.8 port 62012 ssh2
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:setcred): [pamh: 
 0x7fb3bb609610] ENTER: pam_sm_setcred (flags: 0x0002)
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:setcred): 
 PAM_ESTABLISH_CRED not implemented
 Jan 22 20:42:13 cs1228 sshd[17705]: pam_winbind(sshd:setcred): [pamh: 
 0x7fb3bb609610] LEAVE: pam_sm_setcred returning 0 (PAM_SUCCESS)
 Jan 22 20:42:14 cs1228 sshd[17705]: pam_winbind(sshd:session): [pamh: 
 0x7fb3bb609610] ENTER: pam_sm_open_session (flags: 0x0000)
 Jan 22 20:42:14 cs1228 sshd[17705]: pam_winbind(sshd:session): [pamh: 
 0x7fb3bb609610] LEAVE: pam_sm_open_session returning 0 (PAM_SUCCESS)
 Jan 22 20:42:14 cs1228 sshd[17705]: pam_unix(sshd:session): session 
 opened for user MYWORKGROUP\my-username by (uid=0)
 Jan 22 20:42:14 cs1228 sshd[17734]: pam_winbind(sshd:setcred): [pamh: 
 0x7fb3bb609610] ENTER: pam_sm_setcred (flags: 0x0002)
 Jan 22 20:42:14 cs1228 sshd[17734]: pam_winbind(sshd:setcred): 
 PAM_ESTABLISH_CRED not implemented
 Jan 22 20:42:14 cs1228 sshd[17734]: pam_winbind(sshd:setcred): [pamh: 
 0x7fb3bb609610] LEAVE: pam_sm_setcred returning 0 (PAM_SUCCESS)




More information about the samba-technical mailing list