[Samba] [SPAM] Re: Problem with squid+ntlm+samba

[Silvio Aparecido]

On 10/10/2013 08:39 PM, Andrew Bartlett wrote:
> On Thu, 2013-10-10 at 11:05 -0300, Silvio Aparecido wrote:
>> On 10/07/2013 04:30 PM, Andrew Bartlett wrote:
>>> What does wbinfo -P show?
>> wbinfo -p
>> Ping to winbindd succeeded
>>
>>> Are you correctly joined to the domain.
>> net ads testjoin
>> Join is OK
>>
>>> Can you authenticate using wbinfo as root, and then as squid? What do
>>> the winbind logs show?
>> in this server i just connect as root, using wbinfo -a I receive this
>> message
>>
>> plaintext password authentication succeeded
>> challenge/response password authentication succeeded
>>
>> But, in few minutos this connection is droped and I can't login again in
>> domain,
>> unless I restart samba
>> [2013/10/10 10:37:43,  5]
>> winbindd/winbindd_cm.c:1806(set_dc_type_and_flags_connect)
>>     set_dc_type_and_flags_connect: domain CARTHOMSNO
>> [2013/10/10 10:37:43,  5]
>> winbindd/winbindd_cm.c:1815(set_dc_type_and_flags_connect)
>>     set_dc_type_and_flags_connect: Could not bind to PI_DSSETUP on domain
>> CARTHOMSNO: (NT_STATUS_ACCESS_DENIED)
>> [2013/10/10 10:37:43,  5]
>> winbindd/winbindd_cm.c:1862(set_dc_type_and_flags_connect)
>>     set_dc_type_and_flags_connect: Could not bind to PI_LSARPC on domain
>> CARTHOMSNO: (NT_STATUS_ACCESS_DENIED)
>> [2013/10/10 10:37:43, 10] winbindd/winbindd_dual.c:125(async_request)
>>     Sending request to child pid 23705 (domain=CARTHOMSNO)
>> [2013/10/10 10:37:43, 10]
>> winbindd/winbindd_cache.c:2667(cache_retrieve_response)
>>     Retrieving response for pid 23705
> Which version is this.  Can you try the latest (4.0.10, or 4.1 due later
> today)?
>
> Thanks,
>
> Andrew Bartlett
>

Unhappily i can't try in a new version, because i use this in a firewall 
and is it configured with samba34.

On the other hand i think this problem is caused by a network trouble 
between winbind and the AD server.

A way exists to increase the time for connections, or the cache to this 
service don't be drop?

This are the log in the moment that the service is drop.

log.wb-CARTHOMSNO:[2013/10/11 05:32:19,  3] 
winbindd/winbindd_dual.c:52(child_read_request)
log.wb-CARTHOMSNO-  child_read_request: read_data failed: 
NT_STATUS_END_OF_FILE


log.smbd:[2013/10/11 05:32:19,  3] smbd/connection.c:42(yield_connection)
log.smbd-  deleting connection record returned NT_STATUS_NOT_FOUND
log.smbd:[2013/10/11 05:32:19,  3] smbd/server.c:845(exit_server_common)
log.smbd-  Server exit (termination signal)


log.nmbd:[2013/10/11 05:32:19,  0] nmbd/nmbd.c:71(terminate)
log.nmbd-  Got SIGTERM: going down...


[2013/10/11 05:32:19,  0] winbindd/winbindd.c:190(winbindd_sig_term_handler)
   Got sig[15] terminate (is_parent=1)