[Samba] User is invalid on this system

Kevin Elliott kevin_elliott at ci.juneau.ak.us
Fri Nov 30 10:52:38 MST 2012


Ah good ideas.

/etc/nsswitch.conf looks correct:

passwd:         files winbind
group:          files winbind
shadow:         compat

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files


Winbind is running too:

# ps -C winbindd -f
UID        PID  PPID  C STIME TTY          TIME CMD
root     32102     1  0 08:18 ?        00:00:00 /usr/sbin/winbindd
root     32108 32102  0 08:18 ?        00:00:00 /usr/sbin/winbindd
root     32109 32102  0 08:18 ?        00:00:00 /usr/sbin/winbindd
root     32110 32102  0 08:18 ?        00:00:00 /usr/sbin/winbindd


I can't get anything for Active Directory users via getent 'though:

# getent -s winbind passwd CBJ_NT+Kevin_Elliott
# getent -s winbind passwd Kevin_Elliott
# wbinfo -i Kevin_Elliott
kevin_elliott:*:24949:10513::/home/CBJ_NT/kevin_elliott:/bin/false


log.winbindd seems normal too:

[2012/11/30 08:41:50.128842,  6] winbindd/winbindd.c:793(new_connection)
  accepted socket 28
[2012/11/30 08:41:50.128990, 10] winbindd/winbindd.c:643(process_request)
  process_request: request fn INTERFACE_VERSION
[2012/11/30 08:41:50.129052,  3] winbindd/winbindd_misc.c:384(winbindd_interface_version)
  [  425]: request interface version
[2012/11/30 08:41:50.129127, 10] winbindd/winbindd.c:739(winbind_client_response_written)
  winbind_client_response_written[425:INTERFACE_VERSION]: delivered response to client
[2012/11/30 08:41:50.129215, 10] winbindd/winbindd.c:643(process_request)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/11/30 08:41:50.129266,  3] winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
  [  425]: request location of privileged pipe
[2012/11/30 08:41:50.129346, 10] winbindd/winbindd.c:739(winbind_client_response_written)
  winbind_client_response_written[425:WINBINDD_PRIV_PIPE_DIR]: delivered response to client                                                                                                                
[2012/11/30 08:41:50.129434,  6] winbindd/winbindd.c:841(winbind_client_request_read)                                                                                                                      
  closing socket 28, client exited                                                                                                                                                                         
[2012/11/30 08:41:50.129506,  6] winbindd/winbindd.c:793(new_connection)                                                                                                                                   
  accepted socket 28                                                                                                                                                                                       
[2012/11/30 08:41:50.129582, 10] winbindd/winbindd.c:616(process_request)                                                                                                                                  
  process_request: Handling async request 425:PING                                                                                                                                                         
[2012/11/30 08:41:50.129641, 10] winbindd/winbindd.c:678(wb_request_done)                                                                                                                                  
  wb_request_done[425:PING]: NT_STATUS_OK                                                                                                                                                                  
[2012/11/30 08:41:50.129709, 10] winbindd/winbindd.c:739(winbind_client_response_written)                                                                                                                  
  winbind_client_response_written[425:PING]: delivered response to client                                                                                                                                  
[2012/11/30 08:41:50.145530, 10] winbindd/winbindd.c:616(process_request)                                                                                                                                  
  process_request: Handling async request 425:PING                                                                                                                                                         
[2012/11/30 08:41:50.145630, 10] winbindd/winbindd.c:678(wb_request_done)                                                                                                                                  
  wb_request_done[425:PING]: NT_STATUS_OK                                                                                                                                                                  
[2012/11/30 08:41:50.145709, 10] winbindd/winbindd.c:739(winbind_client_response_written)
  winbind_client_response_written[425:PING]: delivered response to client
[2012/11/30 08:41:58.866817, 10] winbindd/winbindd.c:616(process_request)
  process_request: Handling async request 425:PING
[2012/11/30 08:41:58.866937, 10] winbindd/winbindd.c:678(wb_request_done)
  wb_request_done[425:PING]: NT_STATUS_OK
[2012/11/30 08:41:58.867034, 10] winbindd/winbindd.c:739(winbind_client_response_written)
  winbind_client_response_written[425:PING]: delivered response to client
[2012/11/30 08:42:05.563565,  6] winbindd/winbindd.c:793(new_connection)
  accepted socket 29
[2012/11/30 08:42:05.563716, 10] winbindd/winbindd.c:643(process_request)
  process_request: request fn INTERFACE_VERSION
[2012/11/30 08:42:05.563778,  3] winbindd/winbindd_misc.c:384(winbindd_interface_version)
  [  453]: request interface version
[2012/11/30 08:42:05.563884, 10] winbindd/winbindd.c:739(winbind_client_response_written)
  winbind_client_response_written[453:INTERFACE_VERSION]: delivered response to client
[2012/11/30 08:42:05.563976, 10] winbindd/winbindd.c:643(process_request)
  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/11/30 08:42:05.564028,  3] winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir)
  [  453]: request location of privileged pipe
[2012/11/30 08:42:05.564112, 10] winbindd/winbindd.c:739(winbind_client_response_written)
  winbind_client_response_written[453:WINBINDD_PRIV_PIPE_DIR]: delivered response to client
[2012/11/30 08:42:05.564201,  6] winbindd/winbindd.c:841(winbind_client_request_read)
  closing socket 29, client exited
[2012/11/30 08:42:05.564274,  6] winbindd/winbindd.c:793(new_connection)
  accepted socket 29
[2012/11/30 08:42:05.564351, 10] winbindd/winbindd.c:616(process_request)
  process_request: Handling async request 453:PING
[2012/11/30 08:42:05.564411, 10] winbindd/winbindd.c:678(wb_request_done)
  wb_request_done[453:PING]: NT_STATUS_OK
[2012/11/30 08:42:05.564480, 10] winbindd/winbindd.c:739(winbind_client_response_written)
  winbind_client_response_written[453:PING]: delivered response to client
[2012/11/30 08:42:05.585267, 10] winbindd/winbindd.c:616(process_request)
  process_request: Handling async request 453:PING
[2012/11/30 08:42:05.585367, 10] winbindd/winbindd.c:678(wb_request_done)
  wb_request_done[453:PING]: NT_STATUS_OK
[2012/11/30 08:42:05.585443, 10] winbindd/winbindd.c:739(winbind_client_response_written)
  winbind_client_response_written[453:PING]: delivered response to client
[2012/11/30 08:42:10.081128,  6] winbindd/winbindd.c:841(winbind_client_request_read)
  closing socket 29, client exited
[2012/11/30 08:42:12.146894,  6] winbindd/winbindd.c:841(winbind_client_request_read)
  closing socket 28, client exited


If I'm reading the logs correctly it looks like winbind opens the Unix pipe for the client, the client re-establishes the connection and we get a NT_STATUS_OK at the end of it.

Appreciate the help!


-----Original Message-----
From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of Thomas Mueller
Sent: Thursday, November 29, 2012 9:50 PM
To: samba at lists.samba.org
Subject: Re: [Samba] User is invalid on this system

Am Thu, 29 Nov 2012 15:51:55 -0900 schrieb Kevin Elliott:

> Hello all.
> 
> We are running Samba 3.6.6 on a Debian 6.0.6 server. We made the 
> upgrade from 3.6.5 to 3.6.5 about a week ago and ever since we have 
> lost the ability to map Samba shares from our Windows XP SP3 and 
> Windows 7
> clients:
> 
> 
> Here's an example from my workstation (logging verbosity set at 10):
> 
...
> auth/user_krb5.c:162(get_user_from_kerberos_info)
>   Username CBJ_NT+kevin_elliott is invalid on this system
...
> 
> 
> However, I can successfully return login information with winbind:
> 
> # wbinfo -i kevin_elliott
> kevin_elliott:*:24949:10513::/home/CBJ_NT/kevin_elliott:/bin/false
> 
> 'getent passwd' will only return the local users from /etc/passwd.
> 
....
> 
> Any ideas? Anyone else see this?

maybe the "winbind" in /etc/nsswitch.conf got lost? 

is "getent -s winbind passwd $username" returning something?

is winbindd running ("ps -C winbindd -f")?

any log messages in /var/log/samba/log.winbindd ?

- Thomas

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


More information about the samba mailing list