[Samba] Re: SMBD and Winbind Errors

[Chris Douglass]

I've been having a similar issue with winbindd hanging up enumerating
users and groups. 
Here were my symptoms:
log.winbindd showed that winbindd was connecting to servers that did not
respond (no error, but using tail -f on the log at debug 10 while
running either wbinfo -u/g or getent passwd/group showed a stop of
progress). 
net lookup dc <OTHER_DOMAIN> listed IP's that are not available (can't
ping, nslookup or traceroute).
Existing connections work, new connections by any means did not.

I did:

net lookup dc <OTHER_DOMAIN>
net lookup master <OTHER_DOMAIN>

Made sure that master was in list of dc's.
nslookup <IP_OF_MASTER>
wbinfo -I <IP_OF_MASTER>
made sure both records exist.
Edited /etc/samba/lmhosts to have
<IP_OF_MASTER>    <NETBIOS_NAME_OF_MASTER>#20
<IP_OF_MASTER>    <OTHER_DOMAIN>#1B 
<IP_OF_MASTER>    <OTHER_DOMAIN>#1C

added 'name resolution order = lmhosts wins bcast' to smb.conf
I did this for the domain I am in and all domains I have trusts with.
This has cut the time it takes for winbindd to enumerate all the users
on my corporate domains from several hours to about 3-6 mins for users.
HIH. 

I don't know if this is true or not, but my suspicion is that (at least
for NT4 domains) winbind is relying on the PDC to tell it which machines
are dc's. On some domains, dead accounts in the server manager seem to
be screwing this up.
-Chris



On Thu, 2003-08-07 at 14:01, Lahners, Jeremy wrote:

> I have exactly the same errors in a similar configuration (RH9, Samba
> 3b3).  When my samba server gets these errors, it stops allowing new
> connections to services but continues to respond for existing
> connections.  Winbind appears to "fix" itself after 40-45 minutes
> without any intervention.  Restarting winbind fixes it immediately.  I,
> too, would like to hear any updates/suggestions on this problem.
> 
> "Errol Neal" <errol.neal at enhtech.com> wrote in message
> news:<5.1.0.14.0.20030806174625.0384bae8 at mail.enhtech.com>...
> > Hi All,
> > 
> > I am running Samba3.0 beta 3 installed from RPM's provided on the 
> > Samba.org
> > FTP server. My platform is Red Hat 9.
> > 
> > I am seeing a lot of errors such as:
> > 
> > Aug  6 17:50:18 server3 winbindd[31138]: [2003/08/06 17:50:18, 0]
> > nsswitch/winbindd_sid.c:winbindd_lookupname(103)
> > Aug  6 17:50:18 server3 winbindd[31138]:   could not find domain entry
> for 
> > domain
> > 
> > AND
> > 
> > smbd[27004]: [2003/08/06 17:31:06, 0]
> > auth/auth_util.c:make_server_info_info3(994)
> > smbd[27004]:   make_server_info_info3: pdb_init_sam failed!
> > 
> > 
> > A few questions about them:
> > 
> > 1. Are they critical errors?
> > 
> > 2. What do these errors mean?
> > 
> > 2. Can they be resolved?
> > 
> > 
> > In case you need it, here is a copy of my smb.conf
> > 
> > 
> > # Global parameters
> > [global]
> >          workgroup = FOO
> >          realm = FOO.PRIVATE
> >          password server = XX.XX.XX.XX
> >          netbios name = SERVER3
> >          interfaces = XX.XX.XX.XX
> >          bind interfaces only = Yes
> >          security = ADS
> >          encrypt passwords = yes
> >          winbind gid = 60000-65000
> >          winbind uid = 60000-65000
> >          winbind separator = +
> >          template homedir = /home/%U
> >          template shell = /bin/bash
> >          acl compatibility = Win2k
> >          winbind use default domain = yes
> > 
> > [html]
> >          path = /home/htdocs
> >          follow symlinks = no
> >          browsable = yes
> >          force create mode = 0664
> >          force directory mode = 0775
> >          writeable = yes
> >          write list = @FOO+Administrators FOO+esobczak
> >          nt acl support = yes
> > 
> > Thanks in advance,
> > 
> > 
> > Regards,
> > 
> > Errol U. Neal
> > 
> > 
> > 
> > Errol Neal, Systems/Network Administrator
> > eneal at enhtech.com
> > Enhanced Technologies Inc.
> > http://www.enhtech.com
> > 703-924-0301 or 800-368-3249
> > 703-924-0302 Fax
> > 
> > 
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 

--