[Samba] ADS/Winbind - works for everything except actuallyauthenticating Windows logins!

[Lillig Joachim]

Hello,

> > I'm having a bizarre problem doing authentication via 
> winbind against a
> > Windows 2003 server.
> [...etc...]

I got almost the same problem authenticating to a Samba 3.0.20 server
in a Windows 2003 Domain in mixed mode (updated from a Windows 2000 Domain).

Following actions succeed:
> ALL of the wbinfo 
> functions seem 
> to work correctly:  wbinfo -n (name) pulls up an SID.  wbinfo 
> -t says it's 
> okay.  wbinfo -a (user)%(password) succeeds.  wbinfo -u gets 
> the username 
> list, etc.
> 
> "getent passwd" successfully shows all users (including 
> domain users) and 
> "getent group" shows the domain groups in the list.

But here the following actions also succeed:
getent passwd <user name>
getent group <group name>

I removed the server from the domain, added it by 'net join', without
any problem, but the error stays.

In log.winbindd I get when authenticating:
[2005/08/22 08:27:16, 0] nsswitch/winbindd.c:request_len_recv(566)
  request_len_recv: Invalid request size received: 1824
[2005/08/22 08:27:16, 0] nsswitch/winbindd.c:request_len_recv(566)
  request_len_recv: Invalid request size received: 1824

My smb.conf:
---------------------------------------------------------------
[global]
        display charset = UTF-8
        workgroup = DOMTEST
        security = DOMAIN
        password server = 
        log level = 1
        kernel oplocks = No
        ldap ssl = no
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind use default domain = Yes
        admin users = +DOMTEST\EDV
        veto files = /.*/
        posix locking = No
        wide links = No

[test]
        path = /volumes/test
        read only = No
        mangled names = No
----------------------------------------------------------------

Samba 3.0.14 also didn't work, whereas Samba 3.0.11 on another
server with the same configuration works.


Hope for help

Joachim Lillig