[Samba] W2K AD domain join success, wbinfo -t error - question

Дорофеев Михаил Сергеевич DorofeevMS at tmn.transneft.ru
Mon Jan 19 03:57:34 GMT 2004


Hi all!
I'm configuring Samba 3.0.1 on Solaris 9 (rel  s9_58shwpl3) Sparc.
Have successfully installed Ldap libs, Krb5 libs, and, finally - Samba. Trying to join W2KSP4 domain.

net rpc join -S dc01 -U Administrator 
Gives
bash-2.05# /usr/local/samba/bin/net rpc join -S dc01-tmn -U Administrator
Password:

Joined domain MYDOMAIN.

Now i start winbindd. 

The smb.conf file is:
        WORKGROUP=MYDOMAIN
        security = domain
        winbind use default domain = yes
        winbind separator = +
        idmap uid = 10000-20000
        winbind gid = 10000-20000
        winbind enum users = yes
        winbind enum groups = yes
        template homedir = /export/home/%D/%U
        template shell = /bin/bash


Then 
wbinfo -g LISTS domain groups and
wbinfo -u LISTS domain users.
See below
(bash-2.05# ./wbinfo -g
Domain Admins
Domain Users
Domain Guests
..... 
about 100 groups)

BUT wbinfo -t gives the error:

bash-2.05# ./wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_NO_TRUST_SAM_ACCOUNT (0xc000018b)
Could not check secret
bash-2.05# 

And net rpc testjoin sais:

bash-2.05# ./net rpc testjoin
[2004/01/19 08:43:40, 0] utils/net_rpc_join.c:net_rpc_join_ok(73)
  Error in domain join verfication (fresh connection)
Join to domain 'TMN' is not valid 

The log is:
Jan 16 18:47:39 SAMBA_SERVER pam_winbind[9808]: [ID 467601 auth.error] request failed: No trusted SAM account, PAM error was 4, NT error was NT_STATUS_NO_TRUST_SAM_ACCOUNT
Jan 16 18:47:39 SAMBA_SERVER pam_winbind[9808]: [ID 637597 auth.error] internal module error (retval = 4, user = `root'
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error] [2004/01/17 12:59:12, 0] lib/util_sock.c:write_socket_data(388)
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error]   write_socket_data: write failure. Error = Broken pipe
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error] [2004/01/17 12:59:12, 0] lib/util_sock.c:write_socket(413)
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error]   write_socket: Error writing 138 bytes to socket 14: ERRNO = Broken pipe
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error] [2004/01/17 12:59:12, 0] libsmb/clientgen.c:cli_send_smb(155)
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error]   Error writing 138 bytes to client. -1 (Broken pipe)
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error] [2004/01/17 12:59:12, 0] rpc_client/cli_pipe.c:rpc_api_pipe(424)
Jan 17 12:59:12 SAMBA_SERVER winbindd[9713]: [ID 702911 daemon.error]   cli_pipe: return critical error. Error was Write error: Broken pipe
Jan 17 13:59:16 SAMBA_SERVER net[25311]: [ID 702911 user.error] [2004/01/17 13:59:16, 0] utils/net.c:net_getlocalsid(414)
Jan 17 13:59:16 SAMBA_SERVER net[25311]: [ID 702911 user.error]   Can't fetch domain SID for name: SAMBA_SERVER
Jan 19 07:45:52 SAMBA_SERVER ftpd[25362]: [ID 484914 daemon.notice] gethostbyaddr: host136-5.pool8249.interbusiness.it. != 82.49.5.136
Jan 19 08:43:40 SAMBA_SERVER net[26014]: [ID 702911 user.error] [2004/01/19 08:43:40, 0] utils/net_rpc_join.c:net_rpc_join_ok(73)
Jan 19 08:43:40 SAMBA_SERVER net[26014]: [ID 702911 user.error]   Error in domain join verfication (fresh connection)

(WHERE SAMBA_SERVER is the name of my Samba box I'm playing with - changed,
BUT the original name of the samba server IS resolved from any of  domain controllers)

The patch 113476-05  IS applied (although it is needed for the nss mechanism to work properly).

What am i doing wrong ?
Help is really needed, since i,m playing with half-prodaction server hence can not play-and-change-and-reboot much :(.
Thanks all in advance!!!


More information about the samba mailing list