[Samba] Slow and unpredictable Samba performance?

[Jakov Sosic]

On Wednesday 27 August 2008 15:43:49 Jakov Sosic wrote:

> # /opt/csw/bin/net ads testjoin
> [2008/08/27 15:42:53,  0] ../samba-3.2.2/source/param/loadparm.c:(7172)
>   Ignoring unknown parameter "realm"
> ADS support not compiled in

OK, it seems that 3.0.32 from blastwave (thanx Dennis) works OK. I just have 
to figure it out how to get my 'getent passwd'/'getent group' to work with 
this winbindd.... It worked nicely with Sun's, but now I just can't get it 
to.

# /opt/csw/bin/wbinfo -u
[list of Domain users]

# /opt/csw/bin/wbinfo -g
[list of domain groups]

# getent passwd
[only /etc/passwd users, no one from domain]


So, now I will need some explanations to solve this one.


I already have these enteries in /etc/nsswitch.conf
group:  files compat winbind
passwd: files compat winbind


And, what about modfying pam.conf and adding winbind.so is supposed to help 
with what? Or is it only to allow Domain users to ssh to server with their AD 
credentials? Because I don't need the ssh...


When I try to access the share from the Windows workstation, login screen 
displays, and after entering credentials, log says the following (I beleive 
this is the relevant part):

[2008/08/27 16:24:39, 3]   reply_spnego_negotiate: Got secblob of size 1271
[2008/08/27 16:24:39, 10]   secrets_named_mutex: got mutex for replay cache 
mutex
[2008/08/27 16:24:39, 10]   ads_secrets_verify_ticket: enc type [1] failed to 
decry
pt with error Bad encryption type
[2008/08/27 16:24:39, 10]   ads_secrets_verify_ticket: enc type [3] failed to 
decry
pt with error Bad encryption type
[2008/08/27 16:24:39, 3]   ads_secrets_verify_ticket: enc type [23] failed to 
decry
pt with error Decrypt integrity check failed
[2008/08/27 16:24:39, 10]   secrets_named_mutex: released mutex for replay 
cache mu
tex
[2008/08/27 16:24:39, 3]   ads_verify_ticket: krb5_rd_req with auth failed 
(Decrypt
 integrity check failed)
[2008/08/27 16:24:39, 10]   ads_verify_ticket: returning error 
NT_STATUS_LOGON_FAIL
URE
[2008/08/27 16:24:39, 1]   Failed to verify incoming ticket with error 
NT_STATUS_LO
GON_FAILURE!
[2008/08/27 16:24:39, 3]   error packet 
at ../samba-3.0.32/source/smbd/sesssetup.c(
318) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE









-- 
|    Jakov Sosic    |    ICQ: 28410271    |   PGP: 0x965CAE2D   |
=================================================================
| start fighting cancer -> http://www.worldcommunitygrid.org/   |
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
Url : http://lists.samba.org/archive/samba/attachments/20080827/e5623693/attachment.bin