[Samba] ADS auth when primary AD server fails

[Brian_Gautreau at Dell.com]

My apologies for the lack of info.  Thought I had it covered...

(samba version is native to RHEL4)
[root at bar ~]# rpm -qa | grep samba
samba-common-3.0.10-1.4E
samba-3.0.10-1.4E
system-config-samba-1.2.21-1
samba-client-3.0.10-1.4E
[root at bar ~]#  
[root at bar ~]# uname -a
Linux bar 2.6.9-5.EL #1 Wed Jan 5 19:22:18 EST 2005 i686 i686 i386
GNU/Linux
[root at bar ~]# 
[root at bar ~]# smbd -V
Version 3.0.10-1.4E
[root at bar ~]# 

Windows:
Win2k3 no service pack


I will attach the tcpdump output.  Im not sure if it is appropriate to
attach it to send to the list.  Please don't flame me, to bad, if it is
the wrong thing to do.  I don't know where I will provide it otherwise.
It was run as `tcpdump -i eth0 -w /tmp/tcpdump.out host 10.180.23.57 or
host 10.180.23.88` while trying to login with the primary AD server
down.

I also have a snip from /var/log/messages when this took place but I
think it mostly just says winbindd can't talk to the domain....


----  Snip ----

Oct 10 21:13:07 bar winbindd[4008]: [2005/10/10 21:13:07, 0]
nsswitch/winbindd_util.c:get_trust_pw(1034) 
Oct 10 21:13:07 bar winbindd[4008]:   get_trust_pw: could not fetch
trust account password for my domain GUTBUSTER 
Oct 10 21:13:07 bar pam_winbind[28308]: request failed:
NT_STATUS_CANT_ACCESS_DOMAIN_INFO, PAM error was 4, NT error was
NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Oct 10 21:13:07 bar pam_winbind[28308]: internal module error (retval =
4, user = `administrator'
Oct 10 21:13:07 bar sshd(pam_unix)[28308]: check pass; user unknown
Oct 10 21:13:07 bar sshd(pam_unix)[28308]: authentication failure;
logname= uid=0 euid=0 tty=ssh ruser= rhost=windows.gutbuster.local 
Oct 10 21:13:07 bar winbindd[4008]: [2005/10/10 21:13:07, 0]
nsswitch/winbindd_util.c:get_trust_pw(1034) 
Oct 10 21:13:07 bar winbindd[4008]:   get_trust_pw: could not fetch
trust account password for my domain GUTBUSTER 
Oct 10 21:13:07 bar pam_winbind[28308]: request failed:
NT_STATUS_CANT_ACCESS_DOMAIN_INFO, PAM error was 4, NT error was
NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Oct 10 21:13:07 bar pam_winbind[28308]: internal module error (retval =
4, user = `administrator'
Oct 10 21:13:13 bar winbindd[4008]: [2005/10/10 21:13:13, 0]
nsswitch/winbindd_util.c:get_trust_pw(1034) 
Oct 10 21:13:13 bar winbindd[4008]:   get_trust_pw: could not fetch
trust account password for my domain GUTBUSTER 
Oct 10 21:13:13 bar pam_winbind[28308]: request failed:
NT_STATUS_CANT_ACCESS_DOMAIN_INFO, PAM error was 4, NT error was
NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Oct 10 21:13:13 bar pam_winbind[28308]: internal module error (retval =
4, user = `administrator'
Oct 10 21:13:13 bar sshd(pam_unix)[28308]: check pass; user unknown
Oct 10 21:13:13 bar winbindd[4008]: [2005/10/10 21:13:13, 0]
nsswitch/winbindd_util.c:get_trust_pw(1034) 
Oct 10 21:13:13 bar winbindd[4008]:   get_trust_pw: could not fetch
trust account password for my domain GUTBUSTER 
Oct 10 21:13:13 bar pam_winbind[28308]: request failed:
NT_STATUS_CANT_ACCESS_DOMAIN_INFO, PAM error was 4, NT error was
NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Oct 10 21:13:13 bar pam_winbind[28308]: internal module error (retval =
4, user = `administrator'
Oct 10 21:13:23 bar winbindd[4008]: [2005/10/10 21:13:23, 0]
nsswitch/winbindd_util.c:get_trust_pw(1034) 
Oct 10 21:13:23 bar winbindd[4008]:   get_trust_pw: could not fetch
trust account password for my domain GUTBUSTER 
Oct 10 21:13:23 bar pam_winbind[28308]: request failed:
NT_STATUS_CANT_ACCESS_DOMAIN_INFO, PAM error was 4, NT error was
NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Oct 10 21:13:23 bar pam_winbind[28308]: internal module error (retval =
4, user = `administrator'
Oct 10 21:13:26 bar sshd(pam_unix)[28308]: check pass; user unknown
Oct 10 21:13:26 bar winbindd[4008]: [2005/10/10 21:13:26, 0]
nsswitch/winbindd_util.c:get_trust_pw(1034) 
Oct 10 21:13:26 bar winbindd[4008]:   get_trust_pw: could not fetch
trust account password for my domain GUTBUSTER 
Oct 10 21:13:26 bar pam_winbind[28308]: request failed:
NT_STATUS_CANT_ACCESS_DOMAIN_INFO, PAM error was 4, NT error was
NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Oct 10 21:13:26 bar pam_winbind[28308]: internal module error (retval =
4, user = `administrator'

---- Snip ----

 



-Brian