[Samba] Re: samba-3.0.22 -> samba-3.0.23 pam_winbind issue(s)

[Rex Dieter]

Rex Dieter wrote:

> Rex Dieter wrote:
> 
>> Dietrich Streifert wrote:
>> 
>>> I found a bug in nsswitch/pam_winbind.c which I reported to
>>> https://bugzilla.samba.org/show_bug.cgi?id=3916
>>> I submitted shortly a patch which solves the issue.
>> 
>> I can confirm that patch works as advertised, and fixes the issue for me.
>> Many thanks Dietrich.
> 
> I take it back, after further testing, I'm still seeing wierd winbind/pam
> behavior.  On my first test machine, all seemed well.
> 
> On another box, with *exactly* same smb.conf (that was working previously
> with samba-3.0.22), things aren't so rosy:
> 
> Using
> log level = 1 winbind:8
> 
> authentication/login attempts fail with these filling /var/log/messages:
> # Jul 18 10:47:59 foo pam_winbind[27236]: read from socket failed!
> Jul 18 10:47:59 foo pam_winbind[27236]: internal module error (retval = 3,
> user = `bar1')
> 
> Hmm... and
> $ net ads ...
> commands hang too... with periodic log entries saying:
> 
> Jul 18 10:48:30 foo winbindd[27214]: [2006/07/18 10:48:30, 0]
> lib/util_sock.c:write_data(564)
> Jul 18 10:48:30 foo winbindd[27214]:   write_data: write failure. Error =
> Broken pipe
> Jul 18 10:48:30 foo winbindd[27214]: [2006/07/18 10:48:30, 0]
> nsswitch/winbindd_dual.c:fork_domain_child(825)
> Jul 18 10:48:30 foo winbindd[27214]:   Could not write result
> Jul 18 10:49:43 foo winbindd[27228]: [2006/07/18 10:49:43, 0]
> nsswitch/winbindd_dual.c:child_read_request(49)
> Jul 18 10:49:43 foo winbindd[27228]:   Got invalid request length: 0
> 
> Wierd, I'll keep looking...

OK, this one looks like .tdb table upgrade problems.

To get my working samba-3.0.22 box working with samba-3.0.23, I needed to:
1) stop winbind
2) delete everything from /var/cache/samba/, which includes:
gencache.tdb  messages.tdb  netsamlogon_cache.tdb  winbindd_cache.tdb 
winbindd_idmap.tdb  winbindd_privileged/
3) (re)join domain via 'net ads join'
4) (re)start winbind

Just tried upgrading yet another working samba-3.0.22 box to 3.0.23,
and, ?#$#@%^$#%, that one worked mostly, except, now local accounts aren't
working... (this *is* an ancient rh7 box, so that may have something to do
with it).

-- Rex