[Samba] wbinfo -t error when samba server is restarted and windows
2000 domain server keeps running
Urik
urik9 at siol.net
Mon Sep 11 14:50:48 GMT 2006
Hello,
that is my first posting and I hope I provided enough details.
1) system: (SLES 9) Linux mp1 2.6.5-7.193-s390x #1 SMP Wed Jul 20
14:39:18 UTC 2005 s390x s390x s390x GNU/Linux
2) samba version:
samba-doc-3.0.20b-3.4
samba-client-3.0.20b-3.4
samba-winbind-3.0.20b-3.4
samba-3.0.20b-3.4
3) smb.conf:
# Samba config file created using SWAT
# from 172.16.8.1 (172.16.8.1)
# Date: 2006/08/27 11:38:37
[global]
workgroup = WGRP
security = DOMAIN
map to guest = Bad User
username map = /etc/samba/smbusers
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
SO_SNDBUF=14596 SO_RCVBUF=14596
logon path = \\%L\profiles\.msprofile
logon drive = P:
logon home = \\%L\%U\.9xprofile
domain master = No
wins server = 172.16.2.100
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
ldap suffix = dc=example,dc=com
ldap ssl = no
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind use default domain = Yes
printer admin = @ntadmin, root, administrator
cups options = raw
[homes]
comment = Home Directories
valid users = %S
read only = No
inherit permissions = Yes
browseable = No
[profiles]
comment = Network Profiles Service
path = %H
read only = No
create mask = 0600
directory mask = 0700
store dos attributes = Yes
browseable = No
available = No
[users]
comment = All users
path = /home
read only = No
inherit permissions = Yes
veto files = /aquota.user/groups/shares/
browseable = No
available = No
[groups]
comment = All groups
path = /home/groups
read only = No
inherit permissions = Yes
browseable = No
available = No
[pdf]
comment = PDF creator
path = /var/tmp
create mask = 0600
printable = Yes
[printers]
comment = All Printers
path = /var/tmp
create mask = 0600
printable = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin, root
force group = ntadmin
create mask = 0664
directory mask = 0775
[vala]
path = /home/visioa/vala
[kova]
path = /home/visioa/kova
4) log.wb-WGRP from last power failure and increased debug level
[2006/08/26 16:42:31, 3] lib/util.c:fcntl_lock(1826)
fcntl_lock: fcntl lock gave errno 11 (Resource temporarily unavailable)
[2006/08/26 16:42:31, 3] lib/util.c:fcntl_lock(1845)
fcntl_lock: lock failed at offset 0 count 1 op 6 type 0 (Resource
temporarily unavailable)
[2006/08/26 16:42:31, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(105)
cm_get_ipc_userpass: No auth-user defined
[2006/08/26 16:42:31, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
lsa_io_sec_qos: length c does not match size 8
[2006/08/26 16:42:31, 3]
nsswitch/winbindd_misc.c:winbindd_dual_list_trusted_domains(124)
[ 1889]: list trusted domains
[2006/08/26 16:42:31, 3] nsswitch/winbindd_rpc.c:trusted_domains(837)
rpc: trusted_domains
[2006/08/26 16:42:31, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
lsa_io_sec_qos: length c does not match size 8
[2006/08/26 16:43:51, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
[ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:51, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:51, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
[ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:57, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
[ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:57, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
[2006/08/26 16:43:58, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
[ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:58, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:58, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
.....
Last four lines are repeated several 100 times for different users
trying to access samba share.
Thank you all for your help.
Urik
Felipe Augusto van de Wiel pravi:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 09/07/2006 02:26 PM, Urik escreveu:
>
>> I noticed that wbinfo -t returns error and windows clients can not
>> access samba share when samba server is restarted (power failure) and
>> windows 2000 domain server keeps running; wbinfo -u and wbinfo -g return
>> expected results; after net rpc join -U is issued everything works as
>> expected;
>>
>> Is there any way to avoid such behaviour?
>>
>
> How is your samba server configured? It is just a member
> server? Can you send us your smb.conf?
>
> Please run testparm and increase the loglevel (debuglevel)
> values when running these commands and send also the relevant part
> of the logs.
>
>
>
>> Urik
>>
>
> Just for the record, you samba server should be joined to
> the domain and "re-join" it every time you reboot the machine
> should not be necessary, which means, something is wrong. :)
>
> Kind regards,
>
> - --
> Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
> Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
> http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (GNU/Linux)
> Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
>
> iD8DBQFFBWPICj65ZxU4gPQRAhNRAJ9gqosahZsjwjqyerQ3oC3IWQY2dgCgph0s
> JxbrMah3MhuJ9BiarT1dR74=
> =KB+/
> -----END PGP SIGNATURE-----
>
More information about the samba
mailing list