[Samba] samba authenticating users via kerberos failure

Christopher Chan christopher.chan at bradbury.edu.hk
Fri Mar 30 03:40:54 MDT 2012 

When users try to access the samba server via \\shortname, they get a 
dialog prompting them for their username and password. Access via 
\\ip.addr does not exhibit that though.

samba 3.5.13 + winbind + idmap_ldap backend

Logs from samba during attempts to access via \\shortname:

 From log.clientip
[2012/03/30 17:27:46.502131,  1] 
../../../samba-3.5.13/source3/smbd/sesssetup.c:332()
   Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!

 From log.winbindd
[2012/03/30 17:27:01.538840,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()
   accepted socket 21
[2012/03/30 17:27:01.539159, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()
   process_request: request fn INTERFACE_VERSION
[2012/03/30 17:27:01.539244,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:352()
   [14121]: request interface version
[2012/03/30 17:27:01.539382, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
   winbind_client_response_written[14121:INTERFACE_VERSION]: deliverd 
response to client
[2012/03/30 17:27:01.539525, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()
   process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/03/30 17:27:01.539595,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:385()
   [14121]: request location of privileged pipe
[2012/03/30 17:27:01.539755, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
   winbind_client_response_written[14121:WINBINDD_PRIV_PIPE_DIR]: 
deliverd response to client
[2012/03/30 17:27:01.540017,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()
   accepted socket 30
[2012/03/30 17:27:01.540160,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:816()
   closing socket 21, client exited
[2012/03/30 17:27:01.540332, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:593()
   process_request: Handling async request 14121:GETGROUPS
[2012/03/30 17:27:01.540408,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:60()
   getgroups root
[2012/03/30 17:27:01.540646,  5] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:187()
   Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.540733, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:655()
   wb_request_done[14121:GETGROUPS]: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.540866, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
   winbind_client_response_written[14121:GETGROUPS]: deliverd response 
to client
[2012/03/30 17:27:01.541252, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:593()
   process_request: Handling async request 14121:GETGROUPS
[2012/03/30 17:27:01.541333,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:60()
   getgroups root
[2012/03/30 17:27:01.541513,  5] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:187()
   Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.541588, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:655()
   wb_request_done[14121:GETGROUPS]: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.541706, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
   winbind_client_response_written[14121:GETGROUPS]: deliverd response 
to client
[2012/03/30 17:27:01.546385,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:816()
   closing socket 30, client exited
[2012/03/30 17:27:10.089633,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()
   accepted socket 21
[2012/03/30 17:27:10.089909, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()
   process_request: request fn INTERFACE_VERSION
[2012/03/30 17:27:10.089985,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:352()
   [14124]: request interface version
[2012/03/30 17:27:10.090116, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
   winbind_client_response_written[14124:INTERFACE_VERSION]: deliverd 
response to client
[2012/03/30 17:27:10.090248, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()
   process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/03/30 17:27:10.090317,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:385()
   [14124]: request location of privileged pipe
[2012/03/30 17:27:10.090474, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
   winbind_client_response_written[14124:WINBINDD_PRIV_PIPE_DIR]: 
deliverd response to client
[2012/03/30 17:27:10.090775,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()
   accepted socket 30
[2012/03/30 17:27:10.090910,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:816()
   closing socket 21, client exited
[2012/03/30 17:27:10.091091, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:593()
   process_request: Handling async request 14124:GETPWNAM
[2012/03/30 17:27:10.091183,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_getpwnam.c:55()
   getpwnam mailnull
[2012/03/30 17:27:10.091329, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd_cache.c:4805()
   Entry has timed out
[2012/03/30 17:27:10.096324,  5] 
../../../samba-3.5.13/source3/winbindd/winbindd_getpwnam.c:138()
   Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:10.096456, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:655()
   wb_request_done[14124:GETPWNAM]: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:10.096618, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
   winbind_client_response_written[14124:GETPWNAM]: deliverd response to 
client
[2012/03/30 17:27:10.096905, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:593()
   process_request: Handling async request 14124:GETPWNAM
[2012/03/30 17:27:10.096982,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_getpwnam.c:55()
   getpwnam sendmail
[2012/03/30 17:27:10.097107, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd_cache.c:4800()
   Entry has wrong sequence number: 15036703
[2012/03/30 17:27:10.100185,  5] 
../../../samba-3.5.13/source3/winbindd/winbindd_getpwnam.c:138()
   Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:10.100324, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:655()
   wb_request_done[14124:GETPWNAM]: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:10.100483, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
   winbind_client_response_written[14124:GETPWNAM]: deliverd response to 
client
[2012/03/30 17:27:10.115875,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:816()
   closing socket 30, client exited

 From log.winbindd-dc
[2012/03/30 17:27:39.657484,  0] 
../../../samba-3.5.13/source3/lib/util_sock.c:1441()
   getpeername failed. Error was Transport endpoint is not connected

Does anybody have any idea just what the problem is? It was working fine 
with version 3.5.5 until it maxxed out the gid range but upgrading to 
3.5.13 has not fixed the problem even though 3.5.13 has a winbind bug 
fix that stops it from continually allocating new gids.

More information about the samba mailing list