[Samba] Re: Winbind User Login Troubles

[Volker Dose]

Dear Drew,


Drew Daugherty wrote:

> I am running Samba version 3.0.9-1.3E.2 on a server that is joined to a
> windows server 2003 domain using ADS security.  The samba server hosts a
> share called 'files'.  I am having problems mounting this share using a
> new account I set up.  getent passwd shows the information for the new
> account as does wbinfo -u.   Mounting the share with the new users
> account using the net use command from xp or using smbclient from the
> samba server works now and then but it is not consistent.  When it fails
> I see large numbers of log entries appear in winbindd.log that state the
> user does not exist. I can mount the share with my personal domain
> account no problem.  I just switched my samba server security from
> domain to ads and added the enum users and groups entries in smb.conf
> and that is when these problems cropped up.  Thanks in advance for your
> help.

I am not sure, but this seems to me like a similar problem I had the last
days. I set up a samba 3.0.13 member-Server in a w2k3s-Actice Directory
domain and everything seemed to work fine:

wbinfo -t said, the secret is good,
wbinfo -u and -g gave me the list of user and groups
getent passwd or group gave me also teh lists

But wbinfo -n <group> dig not work as expected and wbinfo -r <USERNAME>,
which should give me the list of Windows-Groups the user belongs to, gave
me most of the time (but not everytime - I was really screwed up) an error.

After debugging and reading postings in mailinglists, I tried the following
option in smb.conf:
        
        client schannel = no

and everything worked like a charme.

I would also advise you to look at the last announcement from the
samba-group, posted at tuesday this week:

Release Announcements
=====================

Common bugs fixed in 3.0.14 include:

~  o Compatibility issues between Winbind and Windows 2003 SP1
     domain controllers (*2k3sp1*). 


Kind regards,
Volker Dose