[Samba] winbind cannot authenticate with new win2k PDC

Joey Legaspi joey.legaspi at eazix.com
Thu Dec 23 02:43:22 GMT 2004

Hi everyone,

System info:
 OS: Suse 9.1
 samba: 3.0.2a-51
 PDC: win2K

My winbind was working well with the win2k PDC.  I'm using
it to control access to my samba shares and subversion repositories.

Then they had to change the win2k's hardware.  The hostname,
domain name, settings, etc. were retained (so they say).
And this broke my authentication.

I rejoined the domain using net ads join.

`wbinfo -D EAZIX` gives:
Name              : EAZIX
Alt_Name          : eazix.com
SID               : S-1-5-21-1343024091-527237240-725345543
Active Directory  : Yes
Native            : No
Primary           : Yes
Sequence          : -1

`wbinfo -u` fails:
Error looking up domain users

`wbinfo -g` also fails:
Error looking up domain groups

When I try to access the samba shares, I get this in
[2004/12/23 09:50:31, 1] nsswitch/winbindd_group.c:fill_grent_mem(124)
  could not lookup membership for group rid
S-1-5-21-1343024091-527237240-725345543-1263 in domain EAZIX (error:

How do I fix this?

Thanks in advance!


More information about the samba mailing list