[Samba] One user with a problem accessing shares

[Rick Lobrecht]

I have a RedHat 8 box configured as a Samba server using winbind (version
2.2.7 installed from RedHat's rpms.)  The server successfully joined my
Win2K domain.  Everything works great.  Users can log in to the RedHat
server via ssh using their AD accounts.  Users can connect to the shares
from their windows machines.  All except one.  I have one account that has
problems.  If I restart winbind, this user can log in to the RH server via
ssh with their AD account.  If they try to connect to a share (shared to a
group they are in, or just to them) a dialog pops up asking for a username
and password.  The username and password never works.  After they finally
hit cancel, they've now broken all their access to the RH server.  If they
try to log in via ssh it keeps asking for a password.  If root tries to su
to that user account, they get an account does not exist message.

/usr/sbin/winbindd -i -d4 shows this while the user is trying to connect to
the share

[13614]: getpwnam LOBRECHT+rlobrecht
error getting user info for user '[LOBRECHT]\[rlobrecht]'


Here's the full output from /usr/sbin/winbindd -i -d4
[13614]: getpwnam +nobody
user 'nobody' does not exist
[13614]: getgroups nobody
[13614]: getgroups nobody
[13614]: getpwnam LOBRECHT+rlobrecht
[13614]: getpwnam lobrecht+rlobrecht
[13614]: getpwnam lobrecht+rlobrecht
[13614]: getpwnam lobrecht+rlobrecht
[13614]: getpwnam lobrecht+rlobrecht
[13614]: getpwnam lobrecht+rlobrecht
[13614]: getpwnam lobrecht+rlobrecht
[13614]: getgroups lobrecht+rlobrecht
[13614]: lookupsid S-1-5-21-968063695-1190742555-1786530785-513
[13614]: sid to gid S-1-5-21-968063695-1190742555-1786530785-513
[13614]: lookupsid S-1-5-21-968063695-1190742555-1786530785-512
[13614]: sid to gid S-1-5-21-968063695-1190742555-1786530785-512
[13614]: lookupsid S-1-5-21-968063695-1190742555-1786530785-519
[13614]: sid to gid S-1-5-21-968063695-1190742555-1786530785-519
[13614]: lookupsid S-1-5-21-968063695-1190742555-1786530785-518
[13614]: sid to gid S-1-5-21-968063695-1190742555-1786530785-518
[13614]: lookupsid S-1-5-21-968063695-1190742555-1786530785-1635
[13614]: uid to sid 10005
[13614]: gid to sid 15000
[13614]: gid to sid 15002
[13614]: gid to sid 15003
[13614]: gid to sid 15004
[13614]: getpwnam lobrecht+rlobrecht
error getting user info for user '[LOBRECHT]\[rlobrecht]'
[13614]: getpwnam lobrecht+rlobrecht
error getting user info for user '[LOBRECHT]\[rlobrecht]'
[13614]: getpwnam LOBRECHT+rlobrecht
error getting user info for user '[LOBRECHT]\[rlobrecht]'
[13614]: getpwnam rlobrecht
[13614]: getpwnam RLOBRECHT
[13614]: getpwnam rlobrecht
[13614]: getpwnam RLOBRECHT
[13614]: getpwnam rlobrecht
[13614]: getpwnam RLOBRECHT
[13614]: getpwnam rlobrecht
[13614]: getpwnam RLOBRECHT
[13614]: getgroups nobody
[13614]: lookupsid S-1-5-21-968063695-1190742555-1786530785-513
[13614]: sid to gid S-1-5-21-968063695-1190742555-1786530785-513
[13614]: lookupsid S-1-5-21-968063695-1190742555-1786530785-512
[13614]: sid to gid S-1-5-21-968063695-1190742555-1786530785-512
[13614]: lookupsid S-1-5-21-968063695-1190742555-1786530785-519

Any ideas?

Thanks,
Rick