[Samba] problem with winbind and samba, share1 works but share2 doesn't work.

[Angela Cheng]

Hi, 
 
On the Debian Linux server, followings had been istalled since May,
2006.  Group1 users on Windows 2003 AD are able to access the share e.g.
share1.  I added a new share, share2 for group2 users, but none of user
from group2 can access the new share.  They always prompted for
password.  group1 and group2 are on same AD.
 
ii  samba          3.0.20b a LanManager-like file and printer server fo
ii  samba-common   3.0.20b Samba common files used by both the server a
ii  winbind        3.0.20b service to resolve user and group informatio

Error messages are found under /var/local/log/samba:
/var/local/log/samba# cat log.raywi1
[2006/10/20 17:35:35, 0] auth/auth_util.c:make_server_info_info3(1173)
  make_server_info_info3: pdb_init_sam failed!
[2006/10/20 17:35:49, 0] auth/auth_util.c:make_server_info_info3(1173)
  make_server_info_info3: pdb_init_sam failed!
 
These error messages normal can be resolved by adding winbind into the
/etc/nsswitch.conf.  However, the existing nsswitch.conf has been
configured with winbind.  Group1 users are able to access share1.  I
don't quite know why group2 users are having problem.
 
************************************************************************
*****************************
/etc/nssswitch.conf
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
 
passwd:         compat winbind
group:          compat winbind
shadow:         compat
 
hosts:          files dns
networks:       files
 
protocols:      db files
services:       db files
ethers:         db files
rpc:            db files
 
netgroup:       nis
 
************************************************************************
*
/etc/pam.d/samba
auth            sufficient      pam_winbind.so
auth            required        pam_unix.so
account sufficient      pam_winbind.so
account required        pam_unix.so
session required        pam_unix.so

Angela Cheng
Senior Solutions Architect
Bycast Inc.
(office) 604-692-2067
(cell) 778-238-2716