[Samba] 3.0.6 and pam_winbind problems (sernet)?

[daniel.jarboe at custserv.com]

> | [Thu Aug 26 10:24:51 2004] [error] (2)No such file
> | or directory: access to /cgi-bin/print/modify/modify.py
> | failed for 10.176.156.41, reason:
> | User not known to the underlying authentication module
> 
> Did the libnss_winbind.so.2 get updated via the RPM
> upgrade ?  That would be the first place I would look.
> You can run winbindd at level 10 and see if ther request
> sizes match up with what the daemon expects.


Yes, /lib/libnss_winbind.so.2 is the one that was
packaged with the new rpm.  The libnss_winbind.so symlink
is still there, too.  There's none of the "Invalid request
size" messages that happen when different versions of the
libnss_winbind.so are used.  

Per some other suggestions, I backed up the tdb's and
saved file ownership information, then removed tdb files
and started fresh to see if it made any difference... it
did not for me.

Comparing the two winbindd.log's, I notice the new version
never reports a getgrnam.  The .htaccess file requires group
"Domain Print Ops"

Debug level 5...

both:

nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
  request location of privileged pipe
nsswitch/winbindd_pam.c:winbindd_pam_auth(88)
  pam auth jarboed
nsswitch/winbindd_cm.c:cm_get_ipc_userpass(107)
  IPC$ connections done anonymously
nsswitch/winbindd_cm.c:cm_open_connection(221)
  anonymous connection attempt to TCS_MAIN_PDC from LINPS1
nsswitch/winbindd_pam.c:winbindd_pam_auth(212)
  Plain-text authentication for user jarboed returned NT_STATUS_OK (PAM:
0)
nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 20, pid 536: EOF


old version does this:

nsswitch/winbindd_misc.c:winbindd_interface_version(261)
  request interface version
nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
  request location of privileged pipe

then they both pick up again:

nsswitch/winbindd_user.c:winbindd_getpwnam(122)
  getpwnam jarboed
nsswitch/winbindd_rpc.c:name_to_sid(290)
  rpc: name_to_sid name=jarboed
nsswitch/winbindd_rpc.c:name_to_sid(299)
  name_to_sid [rpc] jarboed for domain TCS_MAIN_DOM
nsswitch/winbindd_rpc.c:query_user(382)
  rpc: query_user rid=S-1-5-21-2020293289-429224891-1907648334-21755
nsswitch/winbindd_rpc.c:query_user(393)
  query_user: Cache lookup succeeded for
S-1-5-21-2020293289-429224891-1907648334-21755

the old version continues, while the new version has stopped...

nsswitch/winbindd_user.c:winbindd_getpwnam(122)
  getpwnam jarboed
nsswitch/winbindd_rpc.c:name_to_sid(290)
  rpc: name_to_sid name=jarboed
nsswitch/winbindd_rpc.c:name_to_sid(299)
  name_to_sid [rpc] jarboed for domain TCS_MAIN_DOM
nsswitch/winbindd_group.c:winbindd_getgrnam(232)
  getgrnam Domain Print Ops
nsswitch/winbindd_rpc.c:name_to_sid(290)
  rpc: name_to_sid name=Domain Print Ops
nsswitch/winbindd_rpc.c:name_to_sid(299)
  name_to_sid [rpc] Domain Print Ops for domain TCS_MAIN_DOM
nsswitch/winbindd_misc.c:winbindd_interface_version(261)
  request interface version
nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
  request location of privileged pipe
nsswitch/winbindd.c:winbind_client_read(465)
  read failed on sock 20, pid 572: EOF

Any ideas?
Thanks,
~ Daniel