[Samba] problem with winbind (netlogon proxy only mode)

Fri Feb 29 10:07:24 GMT 2008

Hello
I have two similar servers, both are Debian Etch (fully updated). Both
work as PDC with samba 3.0.24-6etch9. Both have squid proxy working and I
am using winbind to authenticate my proxy users.
Couple of days ago I've encountered a problem with authorization on one of
my servers. I realized that winbind stopped working properly.
wbinfo -t now gives:
checking the trust secret via RPC calls failed
error code was NT_STATUS_INVALID_NETWORK_RESPONSE (0xc00000c3)
Could not check secret

I've compared winbind's logs on both of my servers (the second one still
works OK)
not-working winbind:
[2008/02/27 12:19:49, 10] passdb/secrets.c:secrets_named_mutex(778)
  secrets_named_mutex: got mutex for SEA
[2008/02/27 12:19:49, 6] libsmb/clientgen.c:write_socket(132)
  write_socket(15,183)
[2008/02/27 12:19:49, 6] libsmb/clientgen.c:write_socket(135)
  write_socket(15,183) wrote 183
[2008/02/27 12:19:49, 10]
lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 1
[2008/02/27 12:19:49, 5] lib/util.c:show_msg(485)
[2008/02/27 12:19:49, 5] lib/util.c:show_msg(495)
  size=1
  smb_com=0x0
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=0
  smb_flg2=0
  smb_tid=0
  smb_pid=0
  smb_uid=0
  smb_mid=0
  smt_wct=0
  smb_bcc=0
[2008/02/27 12:19:49, 5] lib/util.c:show_msg(485)
[2008/02/27 12:19:49, 5] lib/util.c:show_msg(495)
  size=1
  smb_com=0x0
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=0
  smb_flg2=0
  smb_tid=0
  smb_pid=0
  smb_uid=0
  smb_mid=0
  smt_wct=0
  smb_bcc=0
[2008/02/27 12:19:49, 5] nsswitch/winbindd_cm.c:cm_prepare_connection(346)
  Connected anonymously

while my properly working server gives:

[2008/02/27 12:31:27, 10] passdb/secrets.c:secrets_named_mutex(778)
  secrets_named_mutex: got mutex for TRIO
[2008/02/27 12:31:27, 6] libsmb/clientgen.c:write_socket(132)
  write_socket(15,183)
[2008/02/27 12:31:27, 6] libsmb/clientgen.c:write_socket(135)
  write_socket(15,183) wrote 183
[2008/02/27 12:31:27, 10]
lib/util_sock.c:read_smb_length_return_keepalive(623)
  got smb length of 127
[2008/02/27 12:31:27, 5] lib/util.c:show_msg(485)
[2008/02/27 12:31:27, 5] lib/util.c:show_msg(495)
  size=127
  smb_com=0x72
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=0
  smb_pid=32104
  smb_uid=0
  smb_mid=1
  smt_wct=17
  smb_vwv[ 0]=    7 (0x7)
  smb_vwv[ 1]=12803 (0x3203)
  smb_vwv[ 2]=  256 (0x100)
  smb_vwv[ 3]= 1024 (0x400)
  smb_vwv[ 4]=   65 (0x41)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=  256 (0x100)
  smb_vwv[ 7]=41472 (0xA200)
  smb_vwv[ 8]=  125 (0x7D)
  smb_vwv[ 9]=64768 (0xFD00)
  smb_vwv[10]=33011 (0x80F3)
  smb_vwv[11]=32896 (0x8080)
  smb_vwv[12]=12369 (0x3051)
  smb_vwv[13]=13386 (0x344A)
  smb_vwv[14]=51321 (0xC879)
  smb_vwv[15]=50177 (0xC401)
  smb_vwv[16]=  255 (0xFF)
  smb_bcc=58

  size=127
  smb_com=0x72
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=0
  smb_pid=32104
  smb_uid=0
  smb_mid=1
  smt_wct=17
  smb_vwv[ 0]=    7 (0x7)
  smb_vwv[ 1]=12803 (0x3203)
  smb_vwv[ 2]=  256 (0x100)
  smb_vwv[ 3]= 1024 (0x400)
  smb_vwv[ 4]=   65 (0x41)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=  256 (0x100)
  smb_vwv[ 7]=41472 (0xA200)
  smb_vwv[ 8]=  125 (0x7D)
  smb_vwv[ 9]=64768 (0xFD00)
  smb_vwv[10]=33011 (0x80F3)
  smb_vwv[11]=32896 (0x8080)
  smb_vwv[12]=12369 (0x3051)
  smb_vwv[13]=13386 (0x344A)
  smb_vwv[14]=51321 (0xC879)
  smb_vwv[15]=50177 (0xC401)
  smb_vwv[16]=  255 (0xFF)
  smb_bcc=58
[2008/02/27 12:31:27, 10] lib/util.c:dump_data(2222)
  [000] 74 72 69 6F 00 00 00 00  00 00 00 00 00 00 00 00  trio.... ........
  [010] 60 28 06 06 2B 06 01 05  05 02 A0 1E 30 1C A0 0E  `(..+... .. .0. .
  [020] 30 0C 06 0A 2B 06 01 04  01 82 37 02 02 0A A3 0A  0...+... ..7...Ł.
  [030] 30 08 A0 06 1B 04 4E 4F  4E 45                    0. ...NO NE
[2008/02/27 12:31:27, 5] nsswitch/winbindd_cm.c:cm_prepare_connection(298)
  connecting to TRIO from TRIO with username [LAGUNA]\[TRIO$]

I changed nothing in my smb.conf. The only difference between both servers
is libpcre3 package (Perl 5 Compatible Regular Expression Library)
On my "working" server it is 6.7+7.4-2 version and on "non-working" it is
6.7+7.4-3 (I've stopped system updates when I saw this problem).
Could anybody help?

Regards
MM