[Samba] Log shows NT4 for an ADS domain

Joe hishadow at netcabo.pt
Tue Jul 20 19:15:27 GMT 2004


I'm trying to learn about the interactions between SAMBA and win2k DCs.  The
eventual goal is to have a Win2k server with ADS working with a freeBSD
SAMBA server.  I've used the setup from
http://oslabs.mikro-net.com/fbsd_samba.html as the basis for what I've done
so far.  Winbind seems to work and I can show users and groups using wbinfo
although I see some things in the logs that I haven't been able to figure
out.

I'm using a native Win2k ADS domain, but when winbindd is starting up my log
shows HOME is an NT4 domain...  Home was an mixed mode domain when I first
started working with SAMBA, but I have converted it since then.  I thought
I had removed all traces of the old domain from SAMBA, and rejoined the ADS
domain.  Do ADS domains still show NT4 in the log? or do I have something
messed up?

If there's a better reference for the log messages, please point me in the
right direction.

Thanks for the help,
Joe



In this log snippets:
   - home.local is the Win2k domain
   - frosty.home.local is the DC
   - kara.home.local is the Samba box.

[2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173)
  add_trusted_domain: HOME is an NT4  domain
[2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180)
  Added domain HOME HOME.LOCAL S-0-0
...
[2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173)
  add_trusted_domain: BUILTIN is an NT4  domain
[2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180)
  Added domain BUILTIN  S-1-5-32
[2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173)
  add_trusted_domain: KARA is an NT4  domain
[2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180)
  Added domain KARA  S-1-5-21-3424855220-147354258-856157331


--------complete winbind log (level 5)----------------
  winbindd version 3.0.4 started.
  Copyright The Samba Team 2000-2004
[2004/07/20 20:08:31, 2] param/loadparm.c:do_section(3392)
  Processing section "[homes]"
[2004/07/20 20:08:31, 2] param/loadparm.c:do_section(3392)
  Processing section "[storage]"
[2004/07/20 20:08:31, 3] param/loadparm.c:lp_add_ipc(2359)
  adding IPC service
[2004/07/20 20:08:31, 3] param/loadparm.c:lp_add_ipc(2359)
  adding IPC service
[2004/07/20 20:08:31, 2] lib/interface.c:add_interface(79)
  added interface ip=10.0.0.102 bcast=10.0.0.255 nmask=255.255.255.0
[2004/07/20 20:08:31, 2] lib/interface.c:add_interface(79)
  added interface ip=10.0.0.102 bcast=10.0.0.255 nmask=255.255.255.0
[2004/07/20 20:08:31, 2] lib/tallocmsg.c:register_msg_pool_usage(57)
  Registered MSG_REQ_POOL_USAGE
[2004/07/20 20:08:31, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71)
  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173)
  add_trusted_domain: HOME is an NT4  domain
[2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180)
  Added domain HOME HOME.LOCAL S-0-0
[2004/07/20 20:08:31, 3] libads/ldap.c:ads_connect(218)
  Connected to LDAP server 10.0.0.100
[2004/07/20 20:08:31, 3] libads/ldap.c:ads_server_info(2029)
  got ldap server name frosty at HOME.LOCAL, using bind path: dc=HOME,dc=LOCAL
[2004/07/20 20:08:31, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(110)
  IPC$ connections done anonymously
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_start_connection(1373)
  Connecting to host=FROSTY
[2004/07/20 20:08:31, 3] lib/util_sock.c:open_socket_out(735)
  Connecting to 10.0.0.100 at port 445
[2004/07/20 20:08:31, 5] nsswitch/winbindd_cm.c:cm_open_connection(256)
  connecting to FROSTY from KARA with kerberos principal [KARA$@HOME.LOCAL]
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(705)
  Doing spnego session setup (blob length=106)
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 2 840 48018 1 2 2
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 2 840 113554 1 2 2
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 2 840 113554 1 2 2 3
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 3 6 1 4 1 311 2 2 10
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(737)
  got principal=frosty$@HOME.LOCAL
[2004/07/20 20:08:31, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(535)
  Doing kerberos session setup
[2004/07/20 20:08:31, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(245)
  Ticket in ccache[MEMORY:cliconnect] expiration Wed, 21 Jul 2004 06:08:31
GMT
[2004/07/20 20:08:31, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
  lsa_io_sec_qos: length c does not match size 8
[2004/07/20 20:08:31, 3] nsswitch/winbindd_ads.c:alternate_name(932)
  ads: alternate_name
[2004/07/20 20:08:31, 3] libads/ldap.c:ads_connect(218)
  Connected to LDAP server 10.0.0.100
[2004/07/20 20:08:31, 3] libads/ldap.c:ads_server_info(2029)
  got ldap server name frosty at HOME.LOCAL, using bind path: dc=HOME,dc=LOCAL
[2004/07/20 20:08:31, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
  got OID=1 2 840 48018 1 2 2
[2004/07/20 20:08:31, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
  got OID=1 2 840 113554 1 2 2
[2004/07/20 20:08:31, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
  got OID=1 2 840 113554 1 2 2 3
[2004/07/20 20:08:31, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
  got OID=1 3 6 1 4 1 311 2 2 10
[2004/07/20 20:08:31, 3] libads/sasl.c:ads_sasl_spnego_bind(211)
  got principal=frosty$@HOME.LOCAL
[2004/07/20 20:08:31, 1] libsmb/clikrb5.c:ads_krb5_mk_req(306)
  krb5_cc_get_principal failed (No such file or directory)
[2004/07/20 20:08:31, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(245)
  Ticket in ccache[MEMORY:winbind_ccache] expiration Wed, 21 Jul 2004
06:08:52 GMT
[2004/07/20 20:08:31, 3] libads/ldap.c:ads_workgroup_name(2124)
  Found alternate name 'HOME' for realm 'HOME.LOCAL'
[2004/07/20 20:08:31, 5] nsswitch/winbindd_util.c:add_trusted_domains(207)
  scanning trusted domain list
[2004/07/20 20:08:31, 3] nsswitch/winbindd_ads.c:trusted_domains(832)
  ads: trusted_domains
[2004/07/20 20:08:31, 3] libads/ldap.c:ads_connect(218)
  Connected to LDAP server 10.0.0.100
[2004/07/20 20:08:31, 3] libads/ldap.c:ads_server_info(2029)
  got ldap server name frosty at HOME.LOCAL, using bind path: dc=HOME,dc=LOCAL
[2004/07/20 20:08:31, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(110)
  IPC$ connections done anonymously
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_start_connection(1373)
  Connecting to host=FROSTY
[2004/07/20 20:08:31, 3] lib/util_sock.c:open_socket_out(735)
  Connecting to 10.0.0.100 at port 445
[2004/07/20 20:08:31, 5] nsswitch/winbindd_cm.c:cm_open_connection(256)
  connecting to FROSTY from KARA with kerberos principal [KARA$@HOME.LOCAL]
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(705)
  Doing spnego session setup (blob length=106)
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 2 840 48018 1 2 2
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 2 840 113554 1 2 2
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 2 840 113554 1 2 2 3
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 3 6 1 4 1 311 2 2 10
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(737)
  got principal=frosty$@HOME.LOCAL
[2004/07/20 20:08:31, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(535)
  Doing kerberos session setup
[2004/07/20 20:08:31, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(245)
  Ticket in ccache[MEMORY:cliconnect] expiration Wed, 21 Jul 2004 06:08:31
GMT
[2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173)
  add_trusted_domain: BUILTIN is an NT4  domain
[2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180)
  Added domain BUILTIN  S-1-5-32
[2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173)
  add_trusted_domain: KARA is an NT4  domain
[2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180)
  Added domain KARA  S-1-5-21-3424855220-147354258-856157331
[2004/07/20 20:08:31, 5] nsswitch/winbindd_util.c:add_trusted_domains(207)
  scanning trusted domain list
[2004/07/20 20:08:31, 3] nsswitch/winbindd_ads.c:trusted_domains(832)
  ads: trusted_domains
[2004/07/20 20:08:31, 3] libads/ldap.c:ads_connect(218)
  Connected to LDAP server 10.0.0.100
[2004/07/20 20:08:31, 3] libads/ldap.c:ads_server_info(2029)
  got ldap server name frosty at HOME.LOCAL, using bind path: dc=HOME,dc=LOCAL
[2004/07/20 20:08:31, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(110)
  IPC$ connections done anonymously
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_start_connection(1373)
  Connecting to host=FROSTY
[2004/07/20 20:08:31, 3] lib/util_sock.c:open_socket_out(735)
  Connecting to 10.0.0.100 at port 445
[2004/07/20 20:08:31, 5] nsswitch/winbindd_cm.c:cm_open_connection(256)
  connecting to FROSTY from KARA with kerberos principal [KARA$@HOME.LOCAL]
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(705)
  Doing spnego session setup (blob length=106)
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 2 840 48018 1 2 2
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 2 840 113554 1 2 2
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 2 840 113554 1 2 2 3
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730)
  got OID=1 3 6 1 4 1 311 2 2 10
[2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(737)
  got principal=frosty$@HOME.LOCAL
[2004/07/20 20:08:31, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(535)
  Doing kerberos session setup
[2004/07/20 20:08:31, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(245)
  Ticket in ccache[MEMORY:cliconnect] expiration Wed, 21 Jul 2004 06:08:31
GMT





More information about the samba mailing list