[Samba] winbind+samba3.0 pdc on the same machine

[Hesham S. Ahmed]

Its working now for me (atleast per my requirements)
the problem was nsswitch.conf, the moment winbind is
added to the passwd and group lines, the problem
starts appearing. In my case I only wanted to
authenticate users using squid's ntlm authentication,
that is now working, I still have to create dual
accounts though, linux and samba.


--- Andrew Bartlett <abartlet at samba.org> wrote:
> "Hesham S. Ahmed" wrote:
> > 
> > Joining the PDC to the domain is successfull. And
> > seems to work fine. Its just winbind that fails.
> Below
> > is my smb.conf and parts of log.winbindd. When I
> do
> > "wbinfo -t" I recieve the following error
> > 
> > [root at hsalin var]# wbinfo -t
> > checking the trust secret via RPC calls failed
> > error code was NT_STATUS_UNSUCCESSFUL (0xc0000001)
> > Could not check secret
> > 
> > The log.winbindd below is associated with the
> above
> > message.
> > 
> > ---- smb.conf ----
> > 
> > [global]
> >         workgroup = ZSQUID
> >         netbios name = hsalin
> >         server string = Samba 3.0alpha20
> >         security = user
> > 
> >         encrypt passwords = Yes
> > 
> >         passdb backend = smbpasswd
> >         use spnego = No
> > 
> >         domain logons = Yes
> >         os level = 64
> >         lm announce = Auto
> >         lm interval = 60
> >         preferred master = Auto
> >         local master = Yes
> >         domain master = Auto
> >         browse list = Yes
> >         enhanced browsing = Yes
> >         wins support = Yes
> > 
> >         admin users = root
> > 
> >         winbind uid = 10000-20000
> >         winbind gid = 10000-20000
> >         template homedir = /home/%D/%U
> >         template shell = /bin/false
> >         winbind cache time = 15
> >         winbind use default domain = Yes
> > 
> > ; necessary share for domain controller
> > [netlogon]
> >         path = /usr/local/samba/lib/netlogon
> >         read only = yes
> >         write list = ntadmin
> > 
> > 
> > 
> > ---- log.winbindd ----
> > [2002/10/08 09:24:11, 3]
> > nsswitch/winbindd_misc.c:winbindd_info(203)
> >   [11569]: request misc info
> > [2002/10/08 09:24:18, 3]
> >
>
nsswitch/winbindd_misc.c:winbindd_check_machine_acct(52)
> >   [11570]: check machine account
> > [2002/10/08 09:24:18, 3]
> > libsmb/namequery.c:resolve_lmhosts(721)
> >   resolve_lmhosts: Attempting lmhosts lookup for
> name
> > ZSQUID<0x1b>
> > [2002/10/08 09:24:18, 3]
> > libsmb/namequery.c:resolve_wins(628)
> >   resolve_wins: Attempting wins lookup for name
> > ZSQUID<0x1b>
> > [2002/10/08 09:24:18, 3]
> > libsmb/namequery.c:resolve_wins(667)
> >   resolve_wins: using WINS server 127.0.0.1 and
> tag
> > '*'
> > [2002/10/08 09:24:18, 2]
> > libsmb/namequery.c:name_query(404)
> >   Got a positive name query response from
> 127.0.0.1 (
> > 141.99.11.209 )
> > [2002/10/08 09:24:18, 3]
> > nsswitch/winbindd_cm.c:cm_get_dc_name(281)
> >   cm_get_dc_name: Returning DC HSALIN
> (141.99.11.209)
> > for domain ZSQUID
> > [2002/10/08 09:24:18, 3]
> > nsswitch/winbindd_cm.c:cm_get_ipc_userpass(307)
> >   IPC$ connections done by user ZSQUID\root
> > [2002/10/08 09:24:18, 3]
> > libsmb/cliconnect.c:cli_full_connection(1199)
> >   Connecting to host=HSALIN share=IPC$
> > [2002/10/08 09:24:18, 3]
> > lib/util_sock.c:open_socket_out(752)
> >   Connecting to 141.99.11.209 at port 445
> > [2002/10/08 09:24:39, 1]
> > libsmb/cliconnect.c:cli_full_connection(1242)
> >   failed session setup with NT_STATUS_OK
> 
> I need to know why this is happening.  Can you turn
> up the debug, or
> possibly get a sniffer trace?
> 
> Andrew Bartlett
> 
> -- 
> Andrew Bartlett                                
> abartlet at pcug.org.au
> Manager, Authentication Subsystems, Samba Team 
> abartlet at samba.org
> Student Network Administrator, Hawker College  
> abartlet at hawkerc.net
> http://samba.org     http://build.samba.org    
http://hawkerc.net


__________________________________________________
Do you Yahoo!?
Faith Hill - Exclusive Performances, Videos & More
http://faith.yahoo.com