[Samba] winbind authentication issue

Keith Howanitz kh at greenshire.com
Thu Sep 7 13:43:30 GMT 2006


I am running a very mixed network,

Linux, win nt4 servers
OS X, Linux, Win 98SE, 2k, & XP clients

just added a new ubuntu server running samba 3.0.22.
(new server a replacement for an old NT4 server)

NT 4 is PDC

Everything was mostly fine for about a month, then started getting errors 
logging into shares. At first I could fix this by restarting winbind, but 
then came times when I was forced to restart WINS service on NT4 machine. 
I figured it was an issue with WINS, so I shut this service off on NT4, 
and migrated it to the new ubuntu server (6.06).

Still having login problems about once a day or so, restarting winbind 
always fixes it. Not even sure what to look for in the logs???

Here is the logwatch (replaced PDC server name w/ [PDC])

TIA, -Keith:
  **Unmatched Entries**
  lib/util_sid.c:string_to_sid(285)  string_to_sid: Sid S-0-0 is not in a 
valid format. : 31 Time(s)
  libsmb/clientgen.c:cli_rpc_pipe_close(375)  cli_rpc_pipe_close: cli_close 
failed on pipe \NETLOGON, fnum 0xf00b to machine [PDC].  Error was 
Write error: Success : 1 Time(s)
  libsmb/clientgen.c:cli_rpc_pipe_close(375)  cli_rpc_pipe_close: cli_close 
failed on pipe \lsarpc, fnum 0xf00c to machine [PDC].  Error was 
Write error: Success : 1 Time(s)
  libsmb/clientgen.c:cli_rpc_pipe_close(375)  cli_rpc_pipe_close: cli_close 
failed on pipe \samr, fnum 0xf800 to machine [PDC].  Error was Write 
error: Success : 1 Time(s)
  libsmb/credentials.c:creds_client_check(256)  creds_client_check: 
credentials check failed. : 3 Time(s)
  nsswitch/winbindd_dual.c:child_read_request(49)  Got invalid request 
length: 0 : 9 Time(s)
  nsswitch/winbindd_group.c:winbindd_getgrgid(330)  could not lookup sid : 
10 Time(s)
  nsswitch/winbindd_group.c:winbindd_getgrnam(255)  group common in domain 
DATX does not exist : 32 Time(s)
  nsswitch/winbindd_user.c:winbindd_dual_userinfo(157)  error getting user 
info for sid S-1-5-21-32718380-1069048975-798045042-1101 : 2 Time(s)
  nsswitch/winbindd_user.c:winbindd_dual_userinfo(157)  error getting user 
info for sid S-1-5-21-32718380-1069048975-798045042-1185 : 4 Time(s)
  rpc_client/cli_netlogon.c:rpccli_netlogon_sam_network_logon(898) 
rpccli_netlogon_sam_network_logon: credentials chain check failed : 3 
Time(s)
  rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2240) 
cli_rpc_pipe_open_noauth: rpc_pipe_bind for pipe \lsarpc failed with error 
NT_STATUS_BUFFER_TOO_SMALL : 3 Time(s)
  smbd/service.c:make_connection_snum(457)  Couldn't find group 
DATX+common : 32 Time(s)


More information about the samba mailing list