[Samba] Windows 2008 pdc troubles

Preller, Markus Markus.Preller at uk-erlangen.de
Thu Apr 1 08:27:03 MDT 2010

Hi Richard,

sounds familiar to me - we had the same trouble when changing our AD backend
from w2k3 to w2k8R2 servers. 

I fixed the whole thing by using Samba 3.4.7, Kerberos 1.7.1 and OpenLDAP 2.4.21
completely build from the scratch on Solaris 10 (Sparc and x64). Kerberos 1.6.3
has some issues with upper/lowercase SPNs so I used 1.7.1. 

Which platform do you have ?

best regards

-----Ursprüngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im Auftrag von Richard Smits
Gesendet: Donnerstag, 1. April 2010 15:25
An: samba at lists.samba.org
Betreff: [Samba] Windows 2008 pdc troubles

We are in the process of upgading our windows 2003 pdc's to windows 
2008Rr2. No problem there, but our samba/winbind clients are beginning 
to show some strange behaviour.

In the beginning we saw a lot of messages appear in the logfiles.

Example :
pr  1 14:07:36 srvxxx winbindd[5148]:   rpc_api_pipe: Remote machine 
pdc.company.net pipe \NETLOGON fnum 0x4003returned critical error. Error 

The clients who were connected to our 2003 pdc did not have this problem.
Now we are getting reports that some mounts are failing, and joining a 
machine to the domain is also failing with a kerberos error. (ticket not 
valid ?)

Some more messages :

winbindd.log :
[2010/04/01 14:54:10, 1] nsswitch/winbindd_util.c:trustdom_recv(229)
Could not receive trustdoms

[2010/03/31 10:02:25, 1] libsmb/clientgen.c:cli_rpc_pipe_close(386)
cli_rpc_pipe_close: cli_close failed on pipe \NETLOGON, fnum 0x4007 to 
machine pdc.company.net.  Error was SUCCESS - 0

We are using samba version samba-3.0.28-1.el5_2.1 on rhel5.

What can we do to troubleshoot or solve this problem ?

Greetings ... Richard
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list