[Samba] Winbind Trust -- grr

[Gaiseric Vandal]

It may be related to a caching issue.  Use testparm -v to check the 
values for the following:

         idmap cache time
         winbind cache time


I had a problem with samba 3.0.x where idmap entries would populate for 
users in a trusted domain- but after the cache time expired the cache 
would not repopulate and I would "loose" the trusted users.    
Increasing the cache time at least reduced how frequently I had to 
delete the cache entries.    This is not a solution but may be will help 
locate the problem.


On 05/25/2011 12:16 PM, Aaron E. wrote:
> First, Thanks for any and all help!!!!
>
> I can't seem to figure out what I need to do, I've been fighting this 
> for a month and am now beating my head off my desk with no solution to 
> be found. I've read others having this issue but they were all older 
> versions.. I am using 3.5.4,, Please read over and give me some input..
>
> Every 7 days winbindd fails on the trust secret. The only way I can 
> figure to fix it is rejoin the domain.
>
> My only solution I can think of is script and cron so the machine 
> rejoins the domain every 6 days on it's own..
>
> I believe I'm forced to use winbind due to dansguardian using 
> ntlm_auth. Dansguardian cant use ldap connection.
>
> Now My smb.conf is as follows on the squid server..
> [global]
>         workgroup = EXAMPLE
>         netbios name = squid1
>         server string = Squid1
>         security = domain
>         password server = netfiles1san, netfiles2san
>     log level = 3
>         log file = /var/log/samba/%m.log
>         max log size = 0
>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>         preferred master = False
>         local master = No
>         domain master = False
>         dns proxy = No
> ;Winbind
>     winbind refresh tickets = false
>         winbind separator = /
>         winbind enum users = yes
>         winbind enum groups = yes
>         winbind use default domain = yes
>         idmap uid = 10000-20000
>         idmap gid = 10000-20000
>
> smb.conf on my DC relevent info is as follows
> security = user
> LDAP Backend
> master
>
> Possibly an issue with using domain on the squid server and user on 
> the DC??
>
>