[Samba] Solaris 10 winbind authentication with ADS

[CJ Keist]

Thanks for the replies.
I got this resolved.
    It was case of my eyes not seeing what was in front of my face.  The 
solaris upgrade DID replaced my /usr/lib/nss_winbind.so.1 link with 
Solaris's on library of same name.  So I just had to rename that and 
recreate my link to the samba compiled libnss_winbind.so file.  This is 
how I have the links done in /usr/lib

-r-xr-xr-x   1 root     root       50880 Dec 27 13:14 libnss_winbind.so
lrwxrwxrwx   1 root     root          17 Dec 17 15:29 
libnss_winbind.so.1 -> libnss_winbind.so
lrwxrwxrwx   1 root     root          17 Jan 12 13:58 nss_winbind.so.1 
-> libnss_winbind.so



On 1/7/11 5:36 AM, Michael Wood wrote:
> Hi
>
> On 6 January 2011 01:11, CJ Keist<cj.keist at colostate.edu>  wrote:
>> Well,
>>      I did smart thing and upgraded my Solaris box to Solaris 10 update 9.
>>   And now my winbind authentication has broken.  I have checked all my
>> /usr/lib/*winbind* and /usr/lib/security/*winbind* libs and all are still
>> good from my last install.  /etc/pam.conf, nsswitch.conf are still intact.
>>   wbinfo seems to work fine.  getent passwd username just returns empty.
>>
>> This is what I'm getting in my /var/samba/log/log.winbindd file:
>>
>> [2011/01/05 16:04:00.061446,  2]
>> winbindd/winbindd.c:819(winbind_client_request_read)
>>   Could not read client request from fd 22: I/O error
> I don't run Solaris and am not using winbind, so this is just a guess,
> but I hope it helps.
>
> winbind communicates via a socket, which I think is put in /tmp by
> default (/tmp/.winbindd/ or something like that).  Can you check what
> "fd 22" is?  e.g. using lsof.  Maybe it's the socket.
>
> It might be that Solaris 10 changes something about /tmp that
> interferes with winbind's socket?  Maybe try putting the socket
> somewhere else.  I think you're supposed to be able to do this with
> "winbind:socket dir = ...".
>
> It seems the "winbind:socket dir" option was introduced in Samba 3.2.0.
>

-- 
C. J. Keist                     Email: cj.keist at colostate.edu
Systems Group Manager           Phone: 970-491-0630
Engineering Network Services    Fax:   970-491-5569
College of Engineering, CSU
Ft. Collins, CO 80523-1301

All I want is a chance to prove 'Money can't buy happiness'