[Samba] Failing identification of users in trusted domains?

NdK ndk.clanbo at gmail.com
Thu Dec 1 14:06:35 MST 2011


On 30/11/2011 08:53, NdK wrote:
> Hi all.
>
> I'm getting mad at this.
> I use winbind to authenticate users in multiple domains from AD. The
> config worked well, before upgrading from 3.5.3 to 3.5.10 in Mandriva.
> 
> Now, if I 'winbind -i user.name' (so using the joined domain PERSONALE)
> I get the correct info, but if I do a 'winbind -i
> STUDENTI\\another.name' the answer is a 'Could not get info for user
> STUDENTI\another.name'...
> 
> On other machines, the same config works well.
> I already tried uninstalling samba (both -winbind and -common), removing
> /etc/samba, /var/cache/samba and /var/lib/samba then reinstalling after
> copying /etc/samba/smb.conf from a working machine and rejoining.
> 
> Doing a tail -f /var/log/samba/* I could see the following:
> [2011/11/28 11:43:51.053242, 10]
> winbindd/winbindd_cache.c:536(refresh_sequence_number)
>   refresh_sequence_number: PERSONALE time ok
> [2011/11/28 11:43:51.053578, 10]
> winbindd/winbindd_cache.c:581(refresh_sequence_number)
>   refresh_sequence_number: PERSONALE seq number is now 343528996
> [2011/11/28 11:43:51.053681, 10]
> winbindd/winbindd_cache.c:913(wcache_save_name_to_sid)
>   wcache_save_name_to_sid: STUDENTI\DIEGO.ZUCCATO2 ->
> S-1-5-21-790525478-1035525444-682003330-86279 (NT_STATUS_OK)
> [2011/11/28 11:43:51.053756, 10]
> winbindd/winbindd_cache.c:935(wcache_save_sid_to_name)
>   wcache_save_sid_to_name: S-1-5-21-790525478-1035525444-682003330-86279
> -> diego.zuccato2 (NT_STATUS_OK)
> [2011/11/28 11:43:51.053805,  1]
> ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
>        wbint_LookupName: struct wbint_LookupName
>           out: struct wbint_LookupName
>               type                     : *
>                   type                     : SID_NAME_USER (1)
>               sid                      : *
>                   sid                      :
> S-1-5-21-790525478-1035525444-682003330-86279
>               result                   : NT_STATUS_OK
> [2011/11/28 11:43:51.053997,  4]
> winbindd/winbindd_dual.c:1532(fork_domain_child)
>   Finished processing child request 63
> [2011/11/28 11:43:51.054045, 10]
> winbindd/winbindd_dual.c:1548(fork_domain_child)
>   Writing 3532 bytes to parent
> [2011/11/28 11:43:51.054113, 10] lib/events.c:183(get_timed_events_timeout)
> 
> ==> log.winbindd <==
> [2011/11/28 11:43:51.054550,  5]
> winbindd/winbindd_getpwnam.c:138(winbindd_getpwnam_recv)
>   Could not convert sid S-1-5-21-790525478-1035525444-682003330-86279:
> NT_STATUS_UNSUCCESSFUL
> [2011/11/28 11:43:51.054670, 10] winbindd/winbindd.c:655(wb_request_done)
>   wb_request_done[17597:GETPWNAM]: NT_STATUS_UNSUCCESSFUL
> 
> 
> It seems my account in STUDENTI gets written to cache, but then winbind
> doesn't read it back ???? And why is the
> 
> Any hints?
> 
> Tks!
> 

Noone w/ an idea? :(

BYtE,
 Diego.



More information about the samba mailing list