[Samba] winbind cannot authenticate with new win2k PDC

[Joey Legaspi]

Hi everyone,


System info:
 OS: Suse 9.1
 samba: 3.0.2a-51
 PDC: win2K


My winbind was working well with the win2k PDC.  I'm using
it to control access to my samba shares and subversion repositories.

Then they had to change the win2k's hardware.  The hostname,
domain name, settings, etc. were retained (so they say).
And this broke my authentication.

I rejoined the domain using net ads join.

`wbinfo -D EAZIX` gives:
Name              : EAZIX
Alt_Name          : eazix.com
SID               : S-1-5-21-1343024091-527237240-725345543
Active Directory  : Yes
Native            : No
Primary           : Yes
Sequence          : -1

`wbinfo -u` fails:
Error looking up domain users

`wbinfo -g` also fails:
Error looking up domain groups


When I try to access the samba shares, I get this in
/var/log/samba/log.winbind:
[2004/12/23 09:50:31, 1] nsswitch/winbindd_group.c:fill_grent_mem(124)
  could not lookup membership for group rid
S-1-5-21-1343024091-527237240-725345543-1263 in domain EAZIX (error:
NT_STATUS_ACCESS_DENIED)

How do I fix this?


Thanks in advance!

-Joey