[Samba] Samba & Winbind Problem - Permissions?

[Gareth Davies]

I'm having some problems with Samba and Winbind (Debian 3.0 Samba 2.2.5)

I've got winbind working pretty much as it should be I think, all the wbinfo
commands work fine and and I can login to the local machine using a domain
login/password but it says no HOME directory even when there is one.

I've set the home directory chown my domain user and 'Domain Users' group.

I can see it in Network Neighbourhood but when I try and access it it says
incorrect password or unknown username and prompts me for a username
password.

I've set up 3 shares, public, temp and IT.

With public public = yes and write list = @'DOMAIN+Domain users' I can view,
browse, read and write.

With Temp it's set to just public = yes and I can't write to it.

With the IT share it's set to public = no and write list = @'Domain+IT' and
I can view it but can't write to it.

If I right click and view properties on all the folders they show up
correctly, IT is a valid group and shows up in wbinfo -g and I am a member.

I am getting these error messages:

[2003/10/02 12:20:40, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
  unable to open passdb database.
[2003/10/02 12:20:43, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
  unable to open passdb database.
[2003/10/02 12:30:42, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
  unable to open passdb database.
[2003/10/02 16:49:05, 0] lib/username.c:user_in_winbind_group_list(357)
  user_in_winbind_group_list: winbind_lookup_name for group
'WILLOWBROOK+Domain failed.
[2003/10/03 10:12:19, 0] lib/username.c:user_in_winbind_group_list(357)
  user_in_winbind_group_list: winbind_lookup_name for group
'WILLOWBROOK+Domain failed.
[2003/10/03 11:01:07, 0] lib/username.c:user_in_winbind_group_list(357)
  user_in_winbind_group_list: winbind_lookup_name for group 'WILLOWBROOK+IT'
failed.


[2003/10/03 11:01:07, 0] nsswitch/winbindd_sid.c:winbindd_lookupname(90)
  could not find domain entry for domain 'WILLOWBROOK
[2003/10/03 11:01:07, 0] nsswitch/winbindd_group.c:winbindd_getgrnam(211)
  could not get domain sid for domain 'WILLOWBROOK
[2003/10/03 11:01:07, 0] nsswitch/winbindd_group.c:winbindd_getgrnam(211)
  could not get domain sid for domain 'WILLOWBROOK

conf file:

[global]
workgroup = WILLOWBROOK
server string = Debian Samba Server
	hosts allow = 192.168.0.0/255.255.0.0 127.0.0.1
log file = /usr/local/samba/var/log.%m
max log size = 50
security = domain
socket options = TCP_NODELAY
local master = no
wins support = no
wins server = 192.168.1.2
dns proxy = no
password server = WILLOWBROOKLI01
 encrypt passwords = yes
map to guest = bad user
winbind uid = 10000-65000
winbind gid = 10000-65000
template homedir = /home/%D/%U
template shell = /bin/sh
winbind separator = +
winbind enum users = yes
winbind enum groups = yes


#============================ Share Definitions
==============================
[homes]
     comment = Home Directories
     browseable = no
     writable = yes
     valid users = %S

# This one is useful for people to share files
[Temp]
   comment = Temporary file space
   path = /temp
   read only = no
   public = yes

[IT]
   comment = IT Staff Only
   path = /it
   read only = no
   public = no
   writable = yes
   printable = no
   create mask = 0777
   write list = @'WILLOWBROOK+IT'

[Public]
   comment = Public Stuff
   path = /public
   public = yes
   writable = yes
   printable = no
   write list = @'WILLOWBROOK+Domain Users'

nt acl support = true


Any ideas what I'm doing wrong?

I guess it must be something fairly simple.

TIA

Gareth Davies - IT Systems
WB Ltd.