[Samba] users disappearing from winbind db

[PBrunnen at bccnetworks.net]

Adam,
  Well, I checked the Kerberos by kinit and kpasswd and they worked fine.
I then tried your other suggestion.  I shutdown winbind, backed up the
databases, and started winbind.
It did generate new databases, but my userid still did not appear.  For
curiosity sake, I disabled my account
in AD and reenabled it.  For some reason, now winbind sees my account again
under wbinfo -u, but it still
will not authenticate against it.  Now I did nothing to this account in AD
except disable and reenable.
Puzzling.  I want to wait a few hours to see if my account starts to become
accepted for authentication.
Thanks for the support so far... and sorry it has taken so long. It is hard
to find a window to take the
system down for such testing.  :-)
 Cheers, Peter.


====================
Peter Brunnengräber

 In specification, Murphy's
Law supersedes Ohm's Law.
       --Unknown


Adam Nielsen <adam.nielsen at uq.edu.au> wrote on 18.01.2006 19:11:07:

> > Adam,
> >   Thanks for the reply!  Well I know that the account still exists in
> > AD. It happens to be my account.  :-P  I guess that it is better than
> > an end user's account.
> > I know that the account exists as on the windows side, I can logon to
> > my pc, exchange server, etc. and they all run off of the AD.
>
> Hmm, that's odd then, are you sure the right server(s) is/are listed
> in /etc/krb5.conf?  It may be possible that you're connecting to a
> server that's not being updated correctly (if you have more than one.)
>
> > I was afraid to delete the .tdb files... but I can give that a
> > shot.   I do have a backup of the .tdb files from some time ago,
> > could I use them? If so, would the users that have been added since
> > then get readded (although maybe not in the right order)?
>
> It's probably best to take a new backup, because I suspect that
> removing them won't make a difference, in which case you'll want to put
> them back again so that all your users are there in the correct order.
> And yes, if you use old backups any users added since the backups were
> taken will be re-added, although almost certainly in the wrong order.
>
> Cheers,
> Adam.