[Samba] wbinfo -g/-u error

[luciano_mt]

Hi,

I have a problem with users enumeration on winbind ...
If I run wbinfo -g the system only display :

BUILTIN-System Operators
BUILTIN-Replicators
BUILTIN-Guests
BUILTIN-Power Users
BUILTIN-Print Operators
BUILTIN-Administrators
BUILTIN-Account Operators
BUILTIN-Backup Operators
BUILTIN-Users

But I am joined on Domain COSTACAVALCANTI and there are many groups...

Some queries work ...

[root at server03 samba]# wbinfo -n COSTACAVALCANTI-Administrator
S-1-5-21-153786527-857004153-1838531238-500 User (1)
[root at server03 samba]# wbinfo -S S-1-5-21-153786527-857004153-1838531238-500
10166

[root at server03 samba]# wbinfo -t
checking the trust secret via RPC calls succeeded

When I use  ...

[root at server03 samba]# wbinfo -u
Error looking up domain users

[root at server03 samba]# wbinfo --sequence
SERVER03 : 1
BUILTIN : 1
COSTACAVALCANTI : DISCONNECTED

[root at server03 samba]# wbinfo -m
SERVER03
BUILTIN

I tried put  a password with ...

wbinfo --set-auth-user=COSTACAVALCANTI-Administrator%password

But the problem continue

There are error messagens when I user winbindd -i -d 3

get_sam_group_entries: could not enumerate domain groups! Error: NT_STATUS_ACCESS_DENIED

When I try ...

[root at server03 samba]# wbinfo -g
BUILTIN-System Operators
BUILTIN-Replicators
BUILTIN-Guests
BUILTIN-Power Users
BUILTIN-Print Operators
BUILTIN-Administrators
BUILTIN-Account Operators
BUILTIN-Backup Operators
BUILTIN-Users

The winbindd log display ...

[17701]: request interface version
[17701]: request location of privileged pipe
[17701]: list groups
convert_string_allocate: Conversion error: Incomplete multibyte sequence(?K)
get_sam_group_entries: could not enumerate domain groups! Error: NT_STATUS_ACCESS_DENIED

My system is a REHL 4 ...
[root at server03 samba]# uname -a
Linux server03.costacavalcanti.local 2.6.9-22.0.2.ELsmp #1 SMP Thu Jan 5 17:13:01 EST 2006 i686 i686 i386 GNU/Linux

and samba is ..

[root at server03 samba]# rpm -qa | grep samba
samba-3.0.10-1.4E.2
samba-common-3.0.10-1.4E.2
system-config-samba-1.2.21-1
samba-client-3.0.10-1.4E.2

The smb.conf

# Global parameters
[global]
        workgroup = COSTACAVALCANTI
        realm = COSTACAVALCANTI.LOCAL
        netbios aliases = SRV_HMCC
        server string = Samba Server
        security = DOMAIN
        map to guest = Bad User
        password server = 172.16.1.1
        username map = /etc/samba/username.map
        log file = /var/log/samba/%m.log
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = /etc/printcap
        dns proxy = No
        wins server = 172.16.1.1
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind separator = -
        winbind use default domain = Yes
        recycle:maxsize = 1000000000
        recycle:noversions = .doc|.xls|.ppt
        recycle:versions = True
        recycle:keeptree = True
        recycle:exclude = *.tmp *.temp *.o *.obj ~$* *.mpg *.mpeg *.mp3 *.wav *.wmv *.pps
        guest ok = Yes
        cups options = raw
        veto files = lost+found
        vfs objects = recycle


The AD server is Windows 2003 Server with SP1 ...

I need help ...

Thanks ...

Luciano