[Samba] wbinfo -t fails but other wbinfo and getent items work.

[Doug VanLeuven]

Michael Wray wrote:

>Problem: wbinfo -t fails. As long as it fails, I am unable to map sids to 
>Group Names. I need this functionality for my application. I can use just 
>about everyother function of wbinfo at least partially...
>
>Distro: Debian woody.
>Packages:
>ii  samba          3.0.11-0woody1 a LanManager-like file and printer server fo
>ii  samba-common   3.0.11-0woody1 Samba common files used by both the server a
>ii  samba-doc      3.0.11-0woody1 Samba documentation
>ii  libpam-smbpass 3.0.11-0woody1 pluggable authentication module for SMB pass
>ii  libsmbclient   3.0.11-0woody1 shared library that allows applications to t
>ii  smbclient      3.0.11-0woody1 a LanManager-like simple client for Unix
>ii  winbind        3.0.11-0woody1 service to resolve user and group informatio
>ii  krb5-config    1.4            Configuration files for Kerberos Version 5
>ii  krb5-doc       1.2.4-5woody8  Documentation for krb5
>ii  libkrb-1-kerbe 1.2.2-8.dirk.1 Kerberos Libraries for Kerberos4 From KTH
>ii  libkrb5-17-hei 0.6.3-0.dirk.1 Libraries for Heimdal Kerberos
>ii  libkrb53       1.2.4-5woody8  MIT Kerberos runtime libraries
>ii  heimdal-client 0.6.3-0.dirk.1 Clients for Heimdal Kerberos
>ii  heimdal-kdc    0.6.3-0.dirk.1 KDC for Heimdal Kerberos
>rc  heimdal-server 0.6.3-0.dirk.1 Servers for Heimdal Kerberos
>rc  heimdal-server 0.6.3-0.dirk.1 X11 files for Heimdal Kerberos
>  
>
Hard to believe MIT & Heimdal can coexist in the standard library 
paths.  Anyone else ever done this?
Anyway, looks like libkrb53 is version 1.2.4.  I never got it to work 
reliably, across the boards, with less than MIT krb5 V1.3.

When I googled "BAD SIG" I got this from samba lists
http://lists.samba.org/archive/samba/2005-January/098500.html

>Caveat, I'm stuck with using "stable" backports for samba...due to the 
>development environment I'm in..policy dictates I wait for the package to be 
>backported before I can upgrade to it.
>log.winbindd,log.nmbd, and log.samba only show the services starting and 
>stopping.  If the answer is upgrading to yet a newer version of samba..then 
>great..the solution will have to wait. Problem started out w/ version 3.0.7, 
>and hasn't been working since..even with subsequent upgrades.  Note: now I am 
>on 3.0.11 (got that about the time everyone started talking about 3.0.14.)
>
>
>
>Here is the error from my log.%m (Of and relating to winbindd)
>
>
>
>test:/var/log/samba# tail -f log.ntlm
>[2005/04/25 14:38:40, 3] 
>nsswitch/winbindd_misc.c:winbindd_interface_version(261)
>  [26801]: request interface version
>[2005/04/25 14:38:40, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
>  [26801]: request location of privileged pipe
>[2005/04/25 14:38:40, 3] 
>nsswitch/winbindd_misc.c:winbindd_check_machine_acct(41)
>  [26801]: check machine account
>[2005/04/25 14:38:40, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(109)
>  IPC$ connections done anonymously
>[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(708)
>  Doing spnego session setup (blob length=113)
>[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(733)
>  got OID=1 2 840 48018 1 2 2
>[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(733)
>  got OID=1 2 840 113554 1 2 2
>[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(733)
>  got OID=1 2 840 113554 1 2 2 3
>[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(733)
>  got OID=1 3 6 1 4 1 311 2 2 10
>[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(740)
>  got principal=server03test$@TEST.COM
>[2005/04/25 14:38:40, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(533)
>  Doing kerberos session setup
>[2005/04/25 14:38:40, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(318)
>  Ticket in ccache[MEMORY:cliconnect] expiration Tue, 26 Apr 2005 00:38:40 GMT
>[2005/04/25 14:38:40, 0] libsmb/smb_signing.c:signing_good(240)
>  signing_good: BAD SIG: seq 1
>

Regards, Doug