[Samba] Re: Re: Winbind Issues in Samba 3.0.0

Clay clayway at excite.com
Wed Nov 5 12:48:24 GMT 2003


Jerry,

> Is PDC the name of your domain?

No sorry...I was trying to simply things with the last post..

The Domain is Matrix with Nemesis as the PDC...sorry for the confusion...

>The failure to find the PDC is earlier in the log.
>This snippet doesn't tell us much.  Sorry.

> Wait...is localhost the domain member or the Samba PDC?

Localhost is a domain member

Below is the log.winbindd..

One section of the log mentions...
>Using cleartext machine password....I have encryted enabled...I don't
understand this one....

Thanks for the help

Clay

[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:rpc_check_hdr(132)
  rpc_check_hdr: rdata->data_size = 96
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
  000000 smb_io_rpc_hdr rpc_hdr
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0000 major     : 05
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0001 minor     : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0002 pkt_type  : 02
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0003 flags     : 03
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0004 pack_type0: 10
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0005 pack_type1: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0006 pack_type2: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0007 pack_type3: 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
      0008 frag_len  : 0060
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
      000a auth_len  : 0020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
      000c call_id   : 00000020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
  000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
      0010 alloc_hint: 00000020
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
      0014 context_id: 0000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0016 cancel_ct : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0017 reserved  : 00
[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:rpc_api_pipe(478)
  rpc_api_pipe: len left: 0 smbtrans read: 96
[2003/11/03 21:02:51, 5] rpc_client/cli_pipe.c:rpc_auth_pipe(210)
  rpc_auth_pipe: pkt_type: 2 len: 96 auth_len: 32 NTLMSSP No schannel Yes
sign Yes seal Yes
[2003/11/03 21:02:51, 10] rpc_client/cli_pipe.c:rpc_auth_pipe(217)
  rpc_auth_pipe: packet:
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
  000000 smb_io_rpc_hdr_auth auth_hdr
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0000 auth_type    : 44
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0001 auth_level   : 06
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0002 padding      : 08
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8(576)
      0003 reserved     : 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
      0004 auth_context : 00000001
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
  000008 smb_io_rpc_auth_netsec_chk schannel_auth_sign
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
      0008 sig  : 77 00 7a 00 ff ff 00 00
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
      0010 seq_num: 6f 99 e2 7a be 6e ca ad
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
      0018 packet_digest: 8f 36 70 06 a5 f1 07 32
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
      0020 data8: ff ab 0c b1 bc cd b3 14
[2003/11/03 21:02:51, 10] rpc_parse/parse_prs.c:netsec_decode(1547)
  SCHANNEL: netsec_decode seq_num=27 data_len=32
[2003/11/03 21:02:51, 6] rpc_client/cli_pipe.c:rpc_api_pipe(520)
  rpc_api_pipe: fragment first and last both set
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_debug(81)
  000018 net_io_r_sam_logon
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
      0018 buffer_creds: 00000001
[2003/11/03 21:02:51, 6] rpc_parse/parse_prs.c:prs_debug(81)
      00001c smb_io_cred
[2003/11/03 21:02:51, 7] rpc_parse/parse_prs.c:prs_debug(81)
          00001c smb_io_chal
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint8s(721)
              001c data: 7c 2f 1e 4f b2 fd 74 f7
[2003/11/03 21:02:51, 7] rpc_parse/parse_prs.c:prs_debug(81)
          000024 smb_io_utime
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
              0024 time: 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint16(605)
      0028 switch_value: 0003
[2003/11/03 21:02:51, 6] rpc_parse/parse_prs.c:prs_debug(81)
      00002c net_io_user_info3
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
          002c ptr_user_info : 00000000
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_uint32(634)
      0030 auth_resp   : 00000001
[2003/11/03 21:02:51, 5] rpc_parse/parse_prs.c:prs_ntstatus(664)
      0034 status      : NT_STATUS_UNSUCCESSFUL
[2003/11/03 21:02:51, 5] libsmb/credentials.c:clnt_deal_with_creds(148)
  clnt_deal_with_creds: 148
[2003/11/03 21:02:51, 4] libsmb/credentials.c:cred_create(90)
  cred_create
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(92)
   sess_key : 13F0F3D94148C6C4
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(93)
   stor_cred: 015F37969F5DC621
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(94)
   timestamp: 3fa716dc
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(95)
   timecred : DD75DED59F5DC621
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_create(96)
   calc_cred: 7C2F1E4FB2FD74F7
[2003/11/03 21:02:51, 4] libsmb/credentials.c:cred_assert(121)
  cred_assert
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_assert(123)
   challenge : 7C2F1E4FB2FD74F7
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_assert(124)
   calculated: 7C2F1E4FB2FD74F7
[2003/11/03 21:02:51, 5] libsmb/credentials.c:cred_assert(128)
  credentials check ok
[2003/11/03 21:02:51, 5] libsmb/credentials.c:clnt_deal_with_creds(167)
   new clnt cred: DD75DED59F5DC621
[2003/11/03 21:02:51, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
  NTLM CRAP authentication for user [MATRIX]\[gmckenzie] returned
NT_STATUS_NO_LOGON_SERVERS (PAM: 4)
[2003/11/03 21:02:51, 10] nsswitch/winbindd.c:client_write(502)
  client_write: wrote 1300 bytes.
[2003/11/03 21:02:51, 10] nsswitch/winbindd.c:winbind_client_read(455)
  client_read: read 0 bytes. Need 1568 more for a full request.
[2003/11/03 21:02:51, 5] nsswitch/winbindd.c:winbind_client_read(462)
  read failed on sock 23, pid 5604: EOF
[2003/11/03 21:03:17, 6] nsswitch/winbindd.c:new_connection(340)
  accepted socket 21
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
  client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
  process_request: request fn INTERFACE_VERSION
[2003/11/03 21:03:17, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(231)
  [ 5607]: request interface version
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
  client_write: wrote 1300 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
  client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2003/11/03 21:03:17, 3]
nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(267)
  [ 5607]: request location of privileged pipe
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
  client_write: wrote 1300 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(547)
  client_write: need to write 48 extra data bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
  client_write: wrote 48 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(536)
  client_write: client_write: complete response written.
[2003/11/03 21:03:17, 6] nsswitch/winbindd.c:new_connection(340)
  accepted socket 23
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
  client_read: read 0 bytes. Need 1568 more for a full request.
[2003/11/03 21:03:17, 5] nsswitch/winbindd.c:winbind_client_read(462)
  read failed on sock 21, pid 5607: EOF
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
  client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
  process_request: request fn PING
[2003/11/03 21:03:17, 3] nsswitch/winbindd_misc.c:winbindd_ping(208)
  [ 5607]: ping
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:client_write(502)
  client_write: wrote 1300 bytes.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:winbind_client_read(455)
  client_read: read 1568 bytes. Need 0 more for a full request.
[2003/11/03 21:03:17, 10] nsswitch/winbindd.c:process_request(305)
  process_request: request fn AUTH_CRAP
[2003/11/03 21:03:17, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
  [ 5607]: pam auth crap domain: MATRIX user: ckinney
[2003/11/03 21:03:17, 4]
passdb/secrets.c:secrets_fetch_trust_account_password(255)
  Using cleartext machine password
[2003/11/03 21:03:17, 4] libsmb/credentials.c:cred_create(90)
  cred_create
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(92)
   sess_key : 13F0F3D94148C6C4
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(93)
   stor_cred: DD75DED59F5DC621
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(94)
   timestamp: 3fa716f5
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(95)
   timecred : D28C85159F5DC621
[2003/11/03 21:03:17, 5] libsmb/credentials.c:cred_create(96)
   calc_cred: 7A18583BED617C9B
[2003/11/03 21:03:17, 5] rpc_parse/parse_net.c:init_id_info2(1050)
  init_id_info2: 1050
[2003/11/03 21:03:17, 5] rpc_parse/parse_misc.c:init_logon_id(1462)
  make_logon_id: 1462
[2003/11/03 21:03:17, 5] rpc_parse/parse_net.c:init_sam_info(1157)
  init_sam_info: 1157
[2003/11/03 21:03:17, 5] rpc_parse/parse_misc.c:init_clnt_info2(1377)
  make_clnt_info: 1377


"Gerald (Jerry) Carter" <jerry at samba.org> wrote in message
news:3FA67907.9030004 at samba.org...
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Clay wrote:
> | Jerry,
> |
> | Hey thanks for the reply....
> |
> | I am currently using Samba 2.2.8a on a slackware 9 box , both the PDC
and
> | the winbind computer. I have not done any of the pam stuff.
> |
> | But when I started up the 3.0.0 on each box, attached is part of the
> winbind
> | log at level 10, when I attempt to attach to the localhost using users
on
> | the PDC...ie smbclient -L localhost -U ckinney
>
> Wait...is localhost the domain member or the Samba PDC?
>
> | [2003/10/26 20:16:38, 3]
> nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(263)
> |   [30739]: pam auth crap domain: PDC user: ckinney
> | [2003/10/26 20:16:38, 2]
> nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(379)
> |   NTLM CRAP authentication for user [PDC]\[ckinney] returned
> | NT_STATUS_NO_LOGON_SERVERS (PAM: 4)
>
> Is PDC the name of your domain?
>
>
>
>
>
> jerry
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQE/pnkGIR7qMdg1EfYRAgPJAJ0T7y6/CTyRUmOJZcoNoOOi9Xhc9wCfXXiw
> pPB0pioCGJjnGBI3+idBVUg=
> =9FRz
> -----END PGP SIGNATURE-----
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.532 / Virus Database: 326 - Release Date: 10/27/2003






More information about the samba mailing list