[Samba] Winbind Craziness

[ray klassen]

 so I had some time to follow this bunny trailand found that even though all the other servers had no problems this one continued to.Every so often a new computer couldn't connect and then it would be all better after a net leave/net join. 
Net join would not work without -S <MyDC> in the command lineWhat I found out was that most net rpc commands such as net rpc testjoin would also fail without -S <MyDC> in the command linewhereas they would work find for any other box.
I also noticed that a tdbtool dump of secrets.tdb was pretty nearly empty whereas other servers had lots of info.The difference was in the smb.conf line "name resolve order" 

earlier I had taken the advice (the more fool me, I guess) of the man page with recommends 

"name resolve order = wins bcast" in a AD environment.
when I changed it back to 

"name resolve order = lmhosts wins host bcast"

as the other servers had it, suddenly all net rpc functions worked again.
I ran 
net ads changetrustpw -UAdminUserandnet rpc changetrustpw 

and now secrets.tdb is populated 

I think I probably had corrupt winbind files at the outset and those where cleared up by the above activity, but the results continued to be skewed because it wasn't using "host" (dns) to look up some of the services. At least hopefully.



    On Friday, 20 July 2018, 17:01:54 GMT-7, ray klassen via samba <samba at lists.samba.org> wrote:  
 
 about 3 weeks ago there was a power outage where our main file server was not connected to any dc for some time. (don't know if that's related)
since then winbind will randomly not resolve rfc_2307 users or groups whenever it feels like it.

have tried
shutting down nmbd,smbd.winbind and running net cache flush (and starting them up again)have tried turning off winbind group and user enumhave tried leaving and joining the domainhave tried 

service winbind stop
service stop samba
rm –rf /var/lib/samba
mkdir -p /var/lib/samba/private​
rm –rf /var/cache/samba 
net join ads –S "yourADserver" –U username
service winbind start
service samba start from a stack exchange page.

Don't know where to go next.

Debian Stretch install

Version 4.5.12-Debian
Help.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba