[Samba] problem after update 3.0.22 -> 3.0.24

[Guido Lorenzutti]

Hi John, the same thing happend to me with the groups. net rpc groups or
wbinfo -g dosen't work anymore. In the PDC and in the domain member
machines.

I really don't know what to do anymore... the ntlm authentication stop
working... And I try like you newer versions and the same problem. Only
if I downgrade to 3.0.14 ( ex stable ) the things works OK. I try to
delete all the tdb and rejoin to the domain or a new workstation and
same problem.

Any help would be great.

Bye.


Carsten John wrote:
> Hello everybody,
>
>
> we were running into trouble after upgrading our samba PDC to a new
> hardware (and a new debian release).
>
> Before the upgrade we used 3.0.22 on a debian sarge machine without
> problems.
>
> Moving the installation to a new machine with debian etch (amd64, samba
> 3.0.24-6etch4) worked good at the first look.
>
> A closer look shows the following problems:
>
> - a domain member server (samba 3.0.22) can't be accessed any more. The
> samba on the PDC are showing a succeeding auth request for the user, but
> the windows box claims access rights problems. This is a minor problem,
> as we could temporarily go around that by mounting the necessary
> filesystem via NFS to the PDC and exporting them from there.
>
> - our logon script (which uses ifmember.exe  to check the group
> membership of the user for printer mapping) does not work any more.
> Testing "ifmember.exe /list" directly at the windows command line shows
> that group memberships are not reported any more.
>
> - additionally some users are reporting problems accessing shares with
> special access groups (couldn't really verify that so far)
>
>
> Last night I tested the following steps go fix the problem - without
> success :-(
>
> - upgraded to 3.0.25 packages from sernet (same problems)
> - compiled and installed  3.0.22 on the machine to downgrade. smbd now
> claims unknown version of passdb.tdb. Obviously the 3.0.24 smbd upgraded
> the file format, that is now unreadable for the old samba daemon.
>
> So far we don't have any netgroup mappings on the server, as they didn't
> have been necessary in the past.
>
> Any help would be really appreciated, as I could not play around with
> the server so much b'cause it's a highly used production system.
>
>
>
> Thanks
>
>
> Carsten
>
>
>
>