[Samba] winbind cannot authenticate with new win2k PDC

[Joey Legaspi]

Additional info:

When the correct password is given:

[2004/12/23 11:11:00, 1] nsswitch/winbindd_group.c:fill_grent_mem(124)
  could not lookup membership for group rid
S-1-5-21-1343024091-527237240-725345543-1263 in domain EAZIX (error:
NT_STATUS_ACCESS_DENIED)


And if I give the wrong password:

[2004/12/23 11:09:24, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth(212)
  Plain-text authentication for user <user> returned
NT_STATUS_WRONG_PASSWORD (PAM: 7)


It seems authentication is working fine.  But somehow, winbind can't get
the group information.

>-----Original Message-----
>From: samba-bounces+joey.legaspi=eazix.com at lists.samba.org 
>[mailto:samba-bounces+joey.legaspi=eazix.com at lists.samba.org] 
>On Behalf Of Joey Legaspi
>Sent: Thursday, December 23, 2004 10:43 AM
>To: samba at lists.samba.org
>Subject: [Samba] winbind cannot authenticate with new win2k PDC
>
>Hi everyone,
>
>
>System info:
> OS: Suse 9.1
> samba: 3.0.2a-51
> PDC: win2K
>
>
>My winbind was working well with the win2k PDC.  I'm using
>it to control access to my samba shares and subversion repositories.
>
>Then they had to change the win2k's hardware.  The hostname,
>domain name, settings, etc. were retained (so they say).
>And this broke my authentication.
>
>I rejoined the domain using net ads join.
>
>`wbinfo -D EAZIX` gives:
>Name              : EAZIX
>Alt_Name          : eazix.com
>SID               : S-1-5-21-1343024091-527237240-725345543
>Active Directory  : Yes
>Native            : No
>Primary           : Yes
>Sequence          : -1
>
>`wbinfo -u` fails:
>Error looking up domain users
>
>`wbinfo -g` also fails:
>Error looking up domain groups
>
>
>When I try to access the samba shares, I get this in
>/var/log/samba/log.winbind:
>[2004/12/23 09:50:31, 1] nsswitch/winbindd_group.c:fill_grent_mem(124)
>  could not lookup membership for group rid
>S-1-5-21-1343024091-527237240-725345543-1263 in domain EAZIX (error:
>NT_STATUS_ACCESS_DENIED)
>
>How do I fix this?
>
>
>Thanks in advance!
>
>-Joey
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
>
>