[Samba] winbind authentication fails with STATUS_BUFFER_OVERFLOW

[Alex Laslavic (Lenox)]

Using samba-3.0.10-1.4E.2 as supplied by RedHat Enterprise 4.  Using
security=ADS mode, and using winbind and pam_winbind to authenticate.  

I was able to sucessfully join the domain, and can enumerate users and
groups.  

Whenever I try to authenticate, it always fails with the status
STATUS_BUFFER_OVERFLOW.  

-------------------pieces of Winbind Logs---------------
[2006/01/26 13:08:55, 5] rpc_parse/parse_prs.c:prs_ntstatus(672)
      0024 status: STATUS_BUFFER_OVERFLOW
[2006/01/26 13:08:55, 3]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(290)
  cli_nt_setup_creds: auth2 challenge failed STATUS_BUFFER_OVERFLOW

[2006/01/26 13:08:55, 3] nsswitch/winbindd_pam.c:winbindd_pam_auth(289)
  could not open handle to NETLOGON pipe
[2006/01/26 13:08:55, 2] nsswitch/winbindd_pam.c:winbindd_pam_auth(361)
  Plain-text authentication for user alaslavic returned
STATUS_BUFFER_OVERFLOW (PAM: 4)
[2006/01/26 13:08:55, 5] nsswitch/winbindd.c:winbind_client_read(477)
  read failed on sock 23, pid 11620: EOF
[2006/01/26 13:08:55, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(126)
  [11620]: getpwnam alaslavic
[2006/01/26 13:08:55, 3] lib/charcnv.c:convert_string_allocate(567)
  convert_string_allocate: Conversion error: Incomplete multibyte
sequence(°VÜ*U)
[2006/01/26 13:08:55, 3] lib/charcnv.c:convert_string_allocate(576)
  convert_string_allocate: Conversion error: Illegal multibyte
sequence(Ü*U)
[2006/01/26 13:08:59, 5] nsswitch/winbindd.c:winbind_client_read(477)
  read failed on sock 20, pid 11620: EOF
[2006/01/26 13:09:11, 5] lib/smbldap.c:smbldap_close(929)
  The connection to the LDAP server was closed
[2006/01/26 13:09:11, 5] sam/idmap_ldap.c:ldap_idmap_close(765)
  The connection to the LDAP server was closed
[2006/01/26 13:09:11, 5] nsswitch/winbindd.c:winbind_client_read(477)
  read failed on sock 10, pid 11586: EOF



---------------smb.conf--------------------
# Globals
[global]
        workgroup = WORLDTRAVEL
        netbios name = usgalnx1tuxmgmt01
        realm = WORLDTRAVEL.LOCAL
        server string = Linux Management Server
        security = ADS
        log level = 7
        ldap admin dn = cn=xxxx,dc=worldtravel,dc=local
        ldap idmap suffix = ou=Idmap
        ldap suffix = dc=worldtravel,dc=local
        idmap backend = ldap:ldap://usgalnx1tuxmgmt01.worldtravel.local
        idmap uid = 100000-900000
        idmap gid = 100000-900000
        template shell = /bin/bash
        winbind use default domain = Yes
        winbind nested groups = Yes
        use spnego = yes
        socket options = TCP_NODELAY SO_RCVBUF=16384

        include = /etc/samba/smb.include


-- 
***********************************
*  Alex Laslavic                   
*  Linux Engineer                  
*  WorldTravel BTI                 
*  x49511                            
*  gpg/pgp key at                   
*       http://keys.jumpbox.net    
***********************************
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20060126/0cc6d3a4/attachment.bin