[Samba] ADS/Winbind - works for everything except actually authenticating Windows logins!

[S Clark]

On Thursday 21 July 2005 12:36 pm, smc+samba at dogphilosophy.net wrote:
> I'm having a bizarre problem doing authentication via winbind against a
> Windows 2003 server.
[...etc...]

Following up, still having this strange problem.

More information - from the Samba box (now running the X86_64 SLES9 3.0.20rc1 
rpm's, previously running the 3.0.14a ones) ALL of the wbinfo functions seem 
to work correctly:  wbinfo -n (name) pulls up an SID.  wbinfo -t says it's 
okay.  wbinfo -a (user)%(password) succeeds.  wbinfo -u gets the username 
list, etc.

"getent passwd" successfully shows all users (including domain users) and 
"getent group" shows the domain groups in the list.

"getent passwd (name of user that worked fine in 'wbinfo -n')" fails - no 
output at all, including no error messages.  Same for "getent group (domain 
group name)" and "getent group (gid)".

/var/log/samba/log.winbind shows:
[2005/07/29 18:33:53, 1] nsswitch/winbindd.c:main(977)
  winbindd version 3.0.20rc1-0.1-SUSE started.
  Copyright The Samba Team 2000-2004
[2005/07/29 18:34:36, 0] nsswitch/winbindd.c:request_len_recv(573)
  process_loop: Invalid request size received: 1824
[2005/07/29 18:40:54, 0] nsswitch/winbindd.c:request_len_recv(573)
  process_loop: Invalid request size received: 1824

And, of course, trying to connect to a share from a Windows box, logged into 
the domain with an authorized user account, it pops up with the "enter your 
name and password" box, and the name and password don't work.  I'm assuming 
this is caused by the same problem that's causing "getent passwd (user)" to 
fail.

Any hints where to go from here?

Thanks