[Samba] User is invalid on this system
Kevin Elliott
kevin_elliott at ci.juneau.ak.us
Fri Nov 30 10:52:38 MST 2012
Ah good ideas.
/etc/nsswitch.conf looks correct:
passwd: files winbind
group: files winbind
shadow: compat
hosts: files dns
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
Winbind is running too:
# ps -C winbindd -f
UID PID PPID C STIME TTY TIME CMD
root 32102 1 0 08:18 ? 00:00:00 /usr/sbin/winbindd
root 32108 32102 0 08:18 ? 00:00:00 /usr/sbin/winbindd
root 32109 32102 0 08:18 ? 00:00:00 /usr/sbin/winbindd
root 32110 32102 0 08:18 ? 00:00:00 /usr/sbin/winbindd
I can't get anything for Active Directory users via getent 'though:
# getent -s winbind passwd CBJ_NT+Kevin_Elliott
# getent -s winbind passwd Kevin_Elliott
# wbinfo -i Kevin_Elliott
kevin_elliott:*:24949:10513::/home/CBJ_NT/kevin_elliott:/bin/false
log.winbindd seems normal too:
[2012/11/30 08:41:50.128842, 6] winbindd/winbindd.c:793(new_connection)
accepted socket 28
[2012/11/30 08:41:50.128990, 10] winbindd/winbindd.c:643(process_request)
process_request: request fn INTERFACE_VERSION
[2012/11/30 08:41:50.129052, 3] winbindd/winbindd_misc.c:384(winbindd_interface_version)
[ 425]: request interface version
[2012/11/30 08:41:50.129127, 10] winbindd/winbindd.c:739(winbind_client_response_written)
winbind_client_response_written[425:INTERFACE_VERSION]: delivered response to client
[2012/11/30 08:41:50.129215, 10] winbindd/winbindd.c:643(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/11/30 08:41:50.129266, 3] winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[ 425]: request location of privileged pipe
[2012/11/30 08:41:50.129346, 10] winbindd/winbindd.c:739(winbind_client_response_written)
winbind_client_response_written[425:WINBINDD_PRIV_PIPE_DIR]: delivered response to client
[2012/11/30 08:41:50.129434, 6] winbindd/winbindd.c:841(winbind_client_request_read)
closing socket 28, client exited
[2012/11/30 08:41:50.129506, 6] winbindd/winbindd.c:793(new_connection)
accepted socket 28
[2012/11/30 08:41:50.129582, 10] winbindd/winbindd.c:616(process_request)
process_request: Handling async request 425:PING
[2012/11/30 08:41:50.129641, 10] winbindd/winbindd.c:678(wb_request_done)
wb_request_done[425:PING]: NT_STATUS_OK
[2012/11/30 08:41:50.129709, 10] winbindd/winbindd.c:739(winbind_client_response_written)
winbind_client_response_written[425:PING]: delivered response to client
[2012/11/30 08:41:50.145530, 10] winbindd/winbindd.c:616(process_request)
process_request: Handling async request 425:PING
[2012/11/30 08:41:50.145630, 10] winbindd/winbindd.c:678(wb_request_done)
wb_request_done[425:PING]: NT_STATUS_OK
[2012/11/30 08:41:50.145709, 10] winbindd/winbindd.c:739(winbind_client_response_written)
winbind_client_response_written[425:PING]: delivered response to client
[2012/11/30 08:41:58.866817, 10] winbindd/winbindd.c:616(process_request)
process_request: Handling async request 425:PING
[2012/11/30 08:41:58.866937, 10] winbindd/winbindd.c:678(wb_request_done)
wb_request_done[425:PING]: NT_STATUS_OK
[2012/11/30 08:41:58.867034, 10] winbindd/winbindd.c:739(winbind_client_response_written)
winbind_client_response_written[425:PING]: delivered response to client
[2012/11/30 08:42:05.563565, 6] winbindd/winbindd.c:793(new_connection)
accepted socket 29
[2012/11/30 08:42:05.563716, 10] winbindd/winbindd.c:643(process_request)
process_request: request fn INTERFACE_VERSION
[2012/11/30 08:42:05.563778, 3] winbindd/winbindd_misc.c:384(winbindd_interface_version)
[ 453]: request interface version
[2012/11/30 08:42:05.563884, 10] winbindd/winbindd.c:739(winbind_client_response_written)
winbind_client_response_written[453:INTERFACE_VERSION]: delivered response to client
[2012/11/30 08:42:05.563976, 10] winbindd/winbindd.c:643(process_request)
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/11/30 08:42:05.564028, 3] winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
[ 453]: request location of privileged pipe
[2012/11/30 08:42:05.564112, 10] winbindd/winbindd.c:739(winbind_client_response_written)
winbind_client_response_written[453:WINBINDD_PRIV_PIPE_DIR]: delivered response to client
[2012/11/30 08:42:05.564201, 6] winbindd/winbindd.c:841(winbind_client_request_read)
closing socket 29, client exited
[2012/11/30 08:42:05.564274, 6] winbindd/winbindd.c:793(new_connection)
accepted socket 29
[2012/11/30 08:42:05.564351, 10] winbindd/winbindd.c:616(process_request)
process_request: Handling async request 453:PING
[2012/11/30 08:42:05.564411, 10] winbindd/winbindd.c:678(wb_request_done)
wb_request_done[453:PING]: NT_STATUS_OK
[2012/11/30 08:42:05.564480, 10] winbindd/winbindd.c:739(winbind_client_response_written)
winbind_client_response_written[453:PING]: delivered response to client
[2012/11/30 08:42:05.585267, 10] winbindd/winbindd.c:616(process_request)
process_request: Handling async request 453:PING
[2012/11/30 08:42:05.585367, 10] winbindd/winbindd.c:678(wb_request_done)
wb_request_done[453:PING]: NT_STATUS_OK
[2012/11/30 08:42:05.585443, 10] winbindd/winbindd.c:739(winbind_client_response_written)
winbind_client_response_written[453:PING]: delivered response to client
[2012/11/30 08:42:10.081128, 6] winbindd/winbindd.c:841(winbind_client_request_read)
closing socket 29, client exited
[2012/11/30 08:42:12.146894, 6] winbindd/winbindd.c:841(winbind_client_request_read)
closing socket 28, client exited
If I'm reading the logs correctly it looks like winbind opens the Unix pipe for the client, the client re-establishes the connection and we get a NT_STATUS_OK at the end of it.
Appreciate the help!
-----Original Message-----
From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of Thomas Mueller
Sent: Thursday, November 29, 2012 9:50 PM
To: samba at lists.samba.org
Subject: Re: [Samba] User is invalid on this system
Am Thu, 29 Nov 2012 15:51:55 -0900 schrieb Kevin Elliott:
> Hello all.
>
> We are running Samba 3.6.6 on a Debian 6.0.6 server. We made the
> upgrade from 3.6.5 to 3.6.5 about a week ago and ever since we have
> lost the ability to map Samba shares from our Windows XP SP3 and
> Windows 7
> clients:
>
>
> Here's an example from my workstation (logging verbosity set at 10):
>
...
> auth/user_krb5.c:162(get_user_from_kerberos_info)
> Username CBJ_NT+kevin_elliott is invalid on this system
...
>
>
> However, I can successfully return login information with winbind:
>
> # wbinfo -i kevin_elliott
> kevin_elliott:*:24949:10513::/home/CBJ_NT/kevin_elliott:/bin/false
>
> 'getent passwd' will only return the local users from /etc/passwd.
>
....
>
> Any ideas? Anyone else see this?
maybe the "winbind" in /etc/nsswitch.conf got lost?
is "getent -s winbind passwd $username" returning something?
is winbindd running ("ps -C winbindd -f")?
any log messages in /var/log/samba/log.winbindd ?
- Thomas
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
More information about the samba
mailing list