[Samba] net ads user works, but winbindd doesn't

[Tom Dickson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The net commands work: net ads testjoin, net ads user (after a ticket is created).

However, winbindd refuses to run correctly. It has an --set-auth-user configured,
but the following commands don't work:

[root at nassc01 samba]# wbinfo -p
Ping to winbindd failed on fd -1
could not ping winbindd!
[root at nassc01 samba]# wbinfo -t
checking the trust secret via RPC calls failed
error code was  (0x0)
Could not check secret

The winbindd logs contain things like:

[2005/10/12 15:16:13, 1] libsmb/clikrb5.c:ads_krb5_mk_req(388)
~  ads_krb5_mk_req: krb5_get_credentials failed for ntpa01$@IBGE-PA.IBGE.GOV.BR
(Cannot find KDC for requested realm)
[2005/10/12 15:16:13, 1] nsswitch/winbindd_ads.c:ads_cached_connection(80)
~  ads_connect for domain IBGE-PA failed: Cannot find KDC for requested realm
[2005/10/12 15:16:20, 1] libsmb/clikrb5.c:ads_krb5_mk_req(388)
~  ads_krb5_mk_req: krb5_get_credentials failed for ntpb01$@IBGE-PB.IBGE.GOV.BR
(Cannot find KDC for requested realm)
[2005/10/12 15:16:20, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(539)
~  spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm

which are other realms. The winbindd processes are running, but wbinfo -p doesn't
work. The times are synched correctly. This is samba version 3.0.14a; it would be
difficult to upgrade but doable if that would resolve the issue.

- -tom
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFDTUXq2dxAfYNwANIRAuOcAKCC4zd3DFCUaWMtj/3x82J9nz8eDQCeLr6c
PleLDfSxd9mJ1KV/s4xhYlQ=
=2vrN
-----END PGP SIGNATURE-----