[Samba] windbind stopped working

David Sonenberg dsonenberg at strozllc.com
Tue May 31 16:27:52 GMT 2005


I recently upgraded my PDC's and BDC's to 3.0.14a but my member servers
are still running 3.0.10.  Today users complained that the couldn't
logon to the member server.  When I try to run a wbinfo -u I get:

Error looking up domain users

Here's the log.windbindd:

2005/05/31 11:06:26, 4] param/loadparm.c:lp_load(3933)
  pm_process() returned Yes
[2005/05/31 11:06:26, 3] param/loadparm.c:lp_add_ipc(2379)
  adding IPC service
[2005/05/31 11:06:26, 3] param/loadparm.c:lp_add_ipc(2379)
  adding IPC service
[2005/05/31 11:06:26, 2] lib/interface.c:add_interface(79)
  added interface ip=10.1.1.31 bcast=10.1.1.255 nmask=255.255.255.0
[2005/05/31 11:06:26, 2] lib/interface.c:add_interface(79)
  added interface ip=10.1.1.31 bcast=10.1.1.255 nmask=255.255.255.0
[2005/05/31 11:06:26, 2] lib/tallocmsg.c:register_msg_pool_usage(57)
  Registered MSG_REQ_POOL_USAGE
[2005/05/31 11:06:26, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71)
  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2005/05/31 11:06:26, 3] nsswitch/winbindd_util.c:add_trusted_domain(173)
  add_trusted_domain: STROZLLC is an NT4  domain
[2005/05/31 11:06:26, 2] nsswitch/winbindd_util.c:add_trusted_domain(180)
  Added domain STROZLLC  S-0-0
[2005/05/31 11:06:26, 4]
passdb/secrets.c:secrets_fetch_trust_account_password(290)
  Using cleartext machine password
[2005/05/31 11:06:26, 3] libsmb/namequery_dc.c:rpc_dc_name(145)
  rpc_dc_name: Returning DC NYHAND (10.1.0.6) for domain STROZLLC
[2005/05/31 11:06:26, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(106)
  IPC$ connections done by user STROZLLC\dsonenberg
[2005/05/31 11:06:26, 3] libsmb/cliconnect.c:cli_start_connection(1382)
  Connecting to host=NYHAND
[2005/05/31 11:06:26, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 10.1.0.6 at port 445
[2005/05/31 11:06:26, 4] lib/time.c:get_serverzone(122)
  Serverzone is 18000
[2005/05/31 11:06:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(713)
  Doing spnego session setup (blob length=58)
[2005/05/31 11:06:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(738)
  got OID=1 3 6 1 4 1 311 2 2 10
[2005/05/31 11:06:26, 3] libsmb/cliconnect.c:cli_session_setup_spnego(745)
  got principal=NONE
2005/05/31 11:06:26, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(878)
  Got challenge flags:
[2005/05/31 11:06:26, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0x60890215
    NTLMSSP_NEGOTIATE_UNICODE
    NTLMSSP_REQUEST_TARGET
    NTLMSSP_NEGOTIATE_SIGN
    NTLMSSP_NEGOTIATE_NTLM
    NTLMSSP_NEGOTIATE_NTLM2
    NTLMSSP_CHAL_TARGET_INFO
    NTLMSSP_NEGOTIATE_128
    NTLMSSP_NEGOTIATE_KEY_EXCH
[2005/05/31 11:06:26, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(900)
[2005/05/31 11:06:26, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(900)
  NTLMSSP: Set final flags:
[2005/05/31 11:06:26, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0x60080215
    NTLMSSP_NEGOTIATE_UNICODE
    NTLMSSP_REQUEST_TARGET
    NTLMSSP_NEGOTIATE_SIGN
    NTLMSSP_NEGOTIATE_NTLM
    NTLMSSP_NEGOTIATE_NTLM2
    NTLMSSP_NEGOTIATE_128
    NTLMSSP_NEGOTIATE_KEY_EXCH
[2005/05/31 11:06:26, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
  NTLMSSP Sign/Seal - Initialising with flags:
[2005/05/31 11:06:26, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0x60080215
    NTLMSSP_NEGOTIATE_UNICODE
    NTLMSSP_REQUEST_TARGET
    NTLMSSP_NEGOTIATE_SIGN
    NTLMSSP_NEGOTIATE_NTLM
    NTLMSSP_NEGOTIATE_NTLM2
    NTLMSSP_NEGOTIATE_128
    NTLMSSP_NEGOTIATE_KEY_EXCH
[2005/05/31 11:06:26, 3] libsmb/cliconnect.c:cli_session_setup(862)
  SPNEGO login failed: Logon failure
[2005/05/31 11:06:26, 4] nsswitch/winbindd_cm.c:cm_open_connection(305)
  failed authenticated session setup with NT_STATUS_LOGON_FAILURE
[2005/05/31 11:06:28, 3] nsswitch/winbindd_rpc.c:trusted_domains(892)
  rpc: trusted_domains
[2005/05/31 11:06:28, 4]
passdb/secrets.c:secrets_fetch_trust_account_password(290)
  Using cleartext machine password
[2005/05/31 11:06:28, 3] libsmb/namequery_dc.c:rpc_dc_name(145)
  rpc_dc_name: Returning DC NYHAND (10.1.0.6) for domain STROZLLC
[2005/05/31 11:06:28, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(106)
  IPC$ connections done by user STROZLLC\dsonenberg
[2005/05/31 11:06:28, 3] libsmb/cliconnect.c:cli_start_connection(1382)
  Connecting to host=NYHAND
[2005/05/31 11:06:28, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 10.1.0.6 at port 445
[2005/05/31 11:06:28, 3] libsmb/cliconnect.c:cli_session_setup_spnego(713)
  Doing spnego session setup (blob length=58)
[2005/05/31 11:06:28, 3] libsmb/cliconnect.c:cli_session_setup_spnego(738)
  got OID=1 3 6 1 4 1 311 2 2 10
[2005/05/31 11:06:28, 3] libsmb/cliconnect.c:cli_session_setup_spnego(745)
  got principal=NONE
[2005/05/31 11:06:28, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(878)
  Got challenge flags:
[2005/05/31 11:06:28, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0x60890215
    NTLMSSP_NEGOTIATE_UNICODE
    NTLMSSP_REQUEST_TARGET
    NTLMSSP_NEGOTIATE_SIGN
    NTLMSSP_NEGOTIATE_NTLM
    NTLMSSP_NEGOTIATE_NTLM2
    NTLMSSP_CHAL_TARGET_INFO
    NTLMSSP_NEGOTIATE_128
    NTLMSSP_NEGOTIATE_KEY_EXCH
[2005/05/31 11:06:28, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(900)
  NTLMSSP: Set final flags:
[2005/05/31 11:06:28, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0x60080215
    NTLMSSP_NEGOTIATE_UNICODE
    NTLMSSP_REQUEST_TARGET
    NTLMSSP_NEGOTIATE_SIGN
    NTLMSSP_NEGOTIATE_NTLM
    NTLMSSP_NEGOTIATE_NTLM2
    NTLMSSP_NEGOTIATE_128
    NTLMSSP_NEGOTIATE_KEY_EXCH
[2005/05/31 11:06:28, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
  NTLMSSP Sign/Seal - Initialising with flags:
[2005/05/31 11:06:28, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0x60080215
    NTLMSSP_NEGOTIATE_UNICODE
    NTLMSSP_REQUEST_TARGET
    NTLMSSP_NEGOTIATE_SIGN
    NTLMSSP_NEGOTIATE_NTLM
    NTLMSSP_NEGOTIATE_NTLM2
    NTLMSSP_NEGOTIATE_128
    NTLMSSP_NEGOTIATE_KEY_EXCH
[2005/05/31 11:06:28, 3] libsmb/cliconnect.c:cli_session_setup(862)
  SPNEGO login failed: Logon failure
[2005/05/31 11:06:28, 4] nsswitch/winbindd_cm.c:cm_open_connection(305)
  failed authenticated session setup with NT_STATUS_LOGON_FAILURE
[2005/05/31 11:06:29, 4]
passdb/secrets.c:secrets_fetch_trust_account_password(290)
  Using cleartext machine password
[2005/05/31 11:06:29, 4] rpc_client/cli_netlogon.c:cli_net_req_chal(45)
  cli_net_req_chal: LSA Request Challenge from DCCELOX to NYHAND:
85F45BD9D09793B3
[2005/05/31 11:06:29, 4] libsmb/credentials.c:cred_session_key(59)
  cred_session_key
[2005/05/31 11:06:29, 4] libsmb/credentials.c:cred_create(90)
  cred_create
[2005/05/31 11:06:29, 4] rpc_client/cli_netlogon.c:cli_net_auth2(108)
  cli_net_auth2: srv:\\NYHAND acct:DCCELOX$ sc:2 mc: DCCELOX chal
47A9B469E66AB255 neg: 400701ff
[2005/05/31 11:06:30, 4] libsmb/credentials.c:cred_create(90)
  cred_create
[2005/05/31 11:06:30, 4] libsmb/credentials.c:cred_assert(121)
  cred_assert
[2005/05/31 11:06:30, 3] nsswitch/winbindd_util.c:add_trusted_domain(173)
  add_trusted_domain: BUILTIN is an NT4  domain
[2005/05/31 11:06:30, 2] nsswitch/winbindd_util.c:add_trusted_domain(180)
  Added domain BUILTIN  S-1-5-32
[2005/05/31 11:06:30, 3] nsswitch/winbindd_util.c:add_trusted_domain(173)
  add_trusted_domain: DCCELOX is an NT4  domain
[2005/05/31 11:06:30, 2] nsswitch/winbindd_util.c:add_trusted_domain(180)
  Added domain DCCELOX  S-1-5-21-1355267301-2103734092-3718352237
[2005/05/31 11:06:30, 3] nsswitch/winbindd_rpc.c:trusted_domains(892)
  rpc: trusted_domains
[2005/05/31 11:08:36, 3]
nsswitch/winbindd_misc.c:winbindd_interface_version(261)
  [25813]: request interface version
[2005/05/31 11:08:36, 3]
nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
  [25813]: request location of privileged pipe
[2005/05/31 11:08:36, 3] nsswitch/winbindd_misc.c:winbindd_ping(238)
  [25813]: ping
[2005/05/31 11:08:36, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth_crap(465)
  [25813]: pam auth crap domain: STROZLLC user: srubin
[2005/05/31 11:08:36, 4]
passdb/secrets.c:secrets_fetch_trust_account_password(290)
  Using cleartext machine password
[2005/05/31 11:08:36, 4]
passdb/secrets.c:secrets_fetch_trust_account_password(290)
  Using cleartext machine password
[2005/05/31 11:08:36, 3] libsmb/namequery_dc.c:rpc_dc_name(145)
  rpc_dc_name: Returning DC NYHAND (10.1.0.6) for domain STROZLLC
[2005/05/31 11:08:36, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(106)
  IPC$ connections done by user STROZLLC\dsonenberg
[2005/05/31 11:08:36, 3] libsmb/cliconnect.c:cli_start_connection(1382)
  Connecting to host=NYHAND
[2005/05/31 11:08:36, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 10.1.0.6 at port 445
[2005/05/31 11:08:37, 3] libsmb/cliconnect.c:cli_session_setup_spnego(713)
  Doing spnego session setup (blob length=58)
[2005/05/31 11:08:37, 3] libsmb/cliconnect.c:cli_session_setup_spnego(738)
  got OID=1 3 6 1 4 1 311 2 2 10
[2005/05/31 11:08:37, 3] libsmb/cliconnect.c:cli_session_setup_spnego(745)
  got principal=NONE

-- 
David Sonenberg
Systems / Network Administrator
Stroz Friedberg, LLC
15 Maiden Lane
15th Floor
New York, NY 10038
Tel 212.981.6527
Fax 917.495.4918

This message is for the named person's use only.  It may contain
confidential, proprietary or legally privileged information. No right to
confidential or privileged treatment of this message is waived or lost
by any error in transmission.  If you have received this message in
error, please immediately notify the sender by e-mail or by telephone at
212.981.6540, delete the message and all copies from your system and
destroy any hard copies.  You must not, directly or indirectly, use,
disclose, distribute, print or copy any part of this message if you are
not the intended recipient.


More information about the samba mailing list