[Samba] Debian patched 3.6.6 winbindd fails.

Rowland penny rpenny at samba.org
Thu Apr 21 15:31:48 UTC 2016


On 21/04/16 16:16, G.W. Haywood wrote:
> Hi Rowland,
>
> Thanks for replying.
>
> On Wed, 20 Apr 2016, Rowland Penny wrote:
>> On Wed, 20 Apr 2016, G.W. Haywood wrote:
>>> [2016/04/20 20:31:30.288745,  0]   Could not fetch our SID - did we 
>>> join?
>>> [2016/04/20 20:31:30.288774,  0]   unable to initialize domain list
>>
>> Can you post your smb.conf ?
>
> Not all of it I'm afraid, but hopefully here are the relevant bits.
> I've removed most comments, and the share/printer definitions.
>
> 8<----------------------------------------------------------------------
> [global]
>   log file        = /var/log/samba/log.%m
>   private dir        = /usr/local/samba/private
>   smb passwd file    = /usr/local/samba/private/smbpasswd
>   lock directory    = /usr/local/samba/var/locks
>   state directory    = /usr/local/samba/var/locks
>   cache directory    = /usr/local/samba/var/locks
>   pid directory        = /usr/local/samba/var/locks
>   ncalrpc dir        = /usr/local/samba/var/ncalrpc
> # [Experimenting April 2016]
> allow dcerpc auth level connect = yes
> raw NTLMv2 auth = no
> # [/Experimenting April 2016]
>    max protocol = SMB2
>    workgroup = REL
>    realm = REL.LOCAL
>    server string = Samba server
>    wins support = yes
>    dns proxy = no
>    name resolve order = wins bcast host
>    kerberos method = secrets and keytab
>    dedicated keytab file = /etc/krb5.keytab
>  client ntlmv2 auth = no
>  hosts deny  = ALL
>  hosts allow = 192.168.0.0/255.255.0.0 127.0.0.0/255.0.0.0
>  interfaces  = eth1 lo
>  bind interfaces only = yes
>    debug prefix timestamp = yes
>    log file = /var/log/samba/log.%m
>    max log size = 100000
>    log level = 3
>    syslog = 0
>    panic action = /usr/share/samba/panic-action %d
>  lanman auth = no
>  ntlm auth = no
>    security = ads
>    password server = rowlescourt-2k3
>    invalid users = root daemon bin sys sync games man lp mail news 
> uucp proxy www-data backup list irc gnats nobody libuuid Debian-exim 
> statd sshd ntpd ntp Administrator messagebus backuppc postgres openerp
>    username map = /etc/samba/username_map
>    encrypt passwords = true
>    passdb backend = smbpasswd
>    obey pam restrictions = no
>    unix password sync = yes
>    passwd program = /usr/bin/passwd %u
>    passwd chat = *Enter\snew\s*\spassword:* %n\n 
> *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
>    domain logons = no
>    load printers = yes
>    printing = cups
>    printcap name = cups
>    socket options = TCP_NODELAY
>   idmap config * : backend = tdb
>   idmap config * : range = 10000-20000
>    template shell = /bin/bash
>    winbind enum groups = yes
>    winbind enum users = yes
>    usershare max shares = 100
> #======================= Share Definitions =======================
> # [long list snipped]
> 8<----------------------------------------------------------------------
>
>> Also is there anything in the logs when winbindd dies ?
>
> You've got what I've got.  The demon just silently exits. :(
>
>> If not, try raising the log level to 3 and try again.
>
> That log was log level 3, set in smb.conf.  Nothing much more of use
> comes out at level 10.
>

Two questions, you seem to have compiled Samba yourself, so why are you 
setting the various directories, why not just use the defaults ?
Secondly, as you have compiled Samba, have you set the PATH correctly ?

echo "PATH=/usr/local/samba/bin/:/usr/local/samba/sbin/:$PATH" > 
/etc/profile.d/samba4.sh
export PATH=/usr/local/samba/bin/:/usr/local/samba/sbin/:$PATH

If you haven't, you may be trying to run the wrong winbindd, you can 
test this with 'which winbindd', it should return this:

/usr/local/samba/sbin/winbindd

Rowland




More information about the samba mailing list