[Samba] Samba 3.5.9 with Windows 2008 R2

[Le, Anh]

Hi All,

I'm trying to re-configure my samba from beginning again as this doc https://wiki.samba.org/index.php/Samba_%26_Active_Directory . I hope I  can resolve the intermittence problem that I'm having as the below message. But could not find the winbind library libnss_winbind.so in source3 so that I can copy it to /lib as the above doc recommend. I did enable winbind when I configure the source code with option "--with-winbind". I do see winbindd file was installed into my samba/sbin. The compiling and installation processes went fine without any error.

Any idea where I can find it? I really appreciate it.

Thanks a lot,

Anh.

From: Le, Anh
Sent: Wednesday, July 13, 2011 3:20 PM
To: 'samba at lists.samba.org'
Subject: Samba 3.5.9 with Windows 2008 R2

Hi All,

We're going to upgrade our DCs to Windows 2008 R2 native mode soon, so we're facing with the challenge that how to get our samba servers (Solaris 8 & Solaris 10) work with Windows 2008 R2 native mode. I've compiled Samba 3.5.9 with AD support. Then I installed and configured the binaries on my 3 test machines (one Solaris 8 and two Solaris 10). The strange problem is one of my test machines (Solaris 10) working perfectly, no problem at all, but the other two machines, one Solaris 8 and another Solaris 10, are having the intermittence problem, sometime I'm able to connect to the share directories from windows machines, and sometime I have " The trust relationship between this workstation and the primary domain failed" error and the errors in the samba log as below

"[2011/07/13 14:40:20.560609,  0] auth/auth_domain.c:188(connect_to_domain_password_server)
  connect_to_domain_password_server: unable to open the domain client session to machine SCAR.PC.COG
NEX.COM. Error was : NT_STATUS_ACCESS_DENIED.
[2011/07/13 14:40:20.564083,  0] rpc_client/cli_pipe.c:4163(cli_rpc_pipe_open_schannel)
  cli_rpc_pipe_open_schannel: failed to get schannel session key from server SCAR.PC.COGNEX.COM for
domain NATICK-NT.
[2011/07/13 14:40:20.564230,  0] auth/auth_domain.c:188(connect_to_domain_password_server)
  connect_to_domain_password_server: unable to open the domain client session to machine SCAR.PC.COG
NEX.COM. Error was : NT_STATUS_ACCESS_DENIED.
[2011/07/13 14:40:20.564726,  0] auth/auth_domain.c:289(domain_client_validate)
  domain_client_validate: Domain password server not available.
[2011/07/13 14:40:31.544390,  0] lib/util_sock.c:474(read_fd_with_timeout)
[2011/07/13 14:40:31.544582,  0] lib/util_sock.c:1441(get_peer_addr_internal)
  getpeername failed. Error was Transport endpoint is not connected
  read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by peer."

I could not figure out why it causes the intermittence problem on my two test machines. They are very much configured the same. I've also spent days on Google but still have not find any good solution.

Any idea what can cause the problem?

Thanks a lot,

Anh

By the way, here are my smb.conf and krb5.conf

# Global parameters
[global]
        workgroup = NATICK-NT
        realm = PC.COGNEX.COM
        preferred master = no
        netbios name = TALON
        server string = Samba %v - %h
        security = ADS
        encrypt passwords = yes
        password server = scar
        domain master = No
        local master = No
        domain logons = No
        inherit acls = Yes
        debug level = 0
        log file = /var/log/smb.log
        idmap uid = 9000-20000
        idmap gid = 600-1000
        deadtime = 15
        load printers = No
        disable spoolss = Yes
        printcap name = /dev/null

And

#
[libdefaults]
        default_realm = PC.COGNEX.COM
        clockskew = 300

[realms]
        PC.COGNEX.COM = {
                kdc = scar.pc.cognex.com
                kdc = sherekhan.pc.cognex.com
                admin_server = scar.pc.cognex.com
                default_domain = pc.cognex.com
        }

[domain_realm]
       .kerberos.server = PC.COGNEX.COM
       pc.cognex.com = PC.COGNEX.COM
       .pc.cognex.com = PC.COGNEX.COM


[logging]
        default = FILE:/var/krb5/kdc.log
        kdc = FILE:/var/log/kdc.log
        kdc_rotate = {

# How often to rotate kdc.log. Logs will get rotated no more
# often than the period, and less often if the KDC is not used
# frequently.

                period = 1d

# how many versions of kdc.log to keep around (kdc.log.0, kdc.log.1, ...)

                versions = 10
        }

[appdefaults]
        kinit = {
                renewable = true
                forwardable= true
        }
        gkadmin = {
                help_url = http://docs.sun.com:80/ab2/coll.384.1/SEAM/@AB2PageVi
ew/1195
        }