[Samba] Not all users correctly winbind-ing on Server 2003 SP1 with 3.0.20b

[Richard Greaney]

Hi all
This one has me baffled - leading me to beleive it could be a bug 
similar to https://bugzilla.samba.org/show_bug.cgi?id=2695

I am running samba 3.0.20b on debian unstable and am having problems 
with some users not resolving properly using winbind.

wbinfo -u shows all users on the system, no problem
wbinfo -a user%password works for any user
getent passwd shows most but not all users

For a user who isn't shown with getent, wbinfo -n will give me their 
sid, but wbinfo -S {sid} returns "Could not convert sid 
S-1-5-21-997653320-332963777-2638616180-1106 to uid"

I have 100 users on the Windows server. Only 81 are being correctly 
resolved. I have tried removing the winbind_idmap.tdb file and getting 
winbindd to rebuild it, but this makes no difference.

Here is a log of what I get when I run winbindd -SFi -d3 then getent passwd:

ads_sasl_spnego_bind: got server principal name =dc1$@BLAH.DOMAIN.NZ
ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
Ticket in ccache[MEMORY:winbind_ccache] expiration Mon, 31 Oct 2005 
23:47:43 GMT
ads: query_user_list
ads query_user_list gave 100 entries
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
59948
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1106
could not lookup domain user IWAM_DC1
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
59948
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1107
could not lookup domain user cba_anonymous
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
59864
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1185
could not lookup domain user WS0012$
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
60116
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1189
could not lookup domain user Room3
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
60032
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1195
could not lookup domain user Room9
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
59780
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1209
could not lookup domain user WS0022$
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
60116
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1239
could not lookup domain user LMarychurch
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
59780
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1241
could not lookup domain user MWiggins
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
60116
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1242
could not lookup domain user LBurgess
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1249
could not lookup domain user LT0006$
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
59948
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1252
could not lookup domain user LT0008$
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1256
could not lookup domain user LT0010$
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_read bad magic 0x42424242 at 
offset=
59780
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1258
could not lookup domain user LT0012$
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1261
could not lookup domain user issue
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1262
could not lookup domain user Search
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1263
could not lookup domain user schooladmin
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1264
could not lookup domain user WS0040$
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1265
could not lookup domain user CDean
tdb(/var/lib/samba/winbindd_idmap.tdb): rec_free_read bad magic 
0x42424242 at of
fset=60200
error getting user id for sid S-1-5-21-997653320-332963777-2638616180-1266
could not lookup domain user



The relevant parts of my smb.conf file:
[global]

winbind separator = ~
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind cache time = 15
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/%U
template shell = /bin/false
winbind use default domain = yes


I would file a bug report, but the dates when they were last looked at 
(may-05) made me wonder how soon my entry would be read. I thought i'd 
start here first.

Hoping someone can shed some light on this.

Regards
Richard