winbindd problem

[Orwig, Paul]

I originally had the password server = *
It is now net to dc1name,dc2name,dc3name,dc4name

I did a test monday where I set it to each DC, one-at-a-time and none of
them worked.
I can try one domain controller at-a-time for multiple tries and see what
happens.

How long after starting winbindd should I wait before trying the wbinfo -u
command?
I have been running a tail -f log.winbindd and waiting for it to pause.

Just so I understand...
The fact that wbinfo -t replies with "secret is good" says that it is able
to talk to the domain controller and should be able to request users/group
listing. Right?

Paul Orwig
Pacific Life


-----Original Message-----
From: MCCALL,DON (HP-USA,ex1) [mailto:don_mccall at hp.com]
Sent: Thursday, April 11, 2002 8:32 AM
To: 'Orwig, Paul'; MCCALL,DON (HP-USA,ex1)
Cc: 'samba-technical at lists.samba.org'
Subject: RE: winbindd problem


Well, that's just wierd.
I haven't run into anything like this before.
in your smb.conf file, have you set 
password server = *
or can you set
password server = pdcname
and then try it multiple times (with the same pdcname)
and finally get it to work?
Don

-----Original Message-----
From: Orwig, Paul [mailto:PORWIG at PacificLife.com]
Sent: Thursday, April 11, 2002 9:40 AM
To: 'MCCALL,DON (HP-USA,ex1)'; Orwig, Paul
Cc: 'samba-technical at lists.samba.org'
Subject: RE: winbindd problem


Yes, it fails at the startup. 
I've been trying various ideas, stopping and restarting winbindd, and
occasionally it works, only to break on the next try.
The last time it worked, I had started it without a debug setting. 8-b

Paul Orwig
Pacific Life
949-219-7082

-----Original Message-----
From: MCCALL,DON (HP-USA,ex1) [mailto:don_mccall at hp.com]
Sent: Wednesday, April 10, 2002 6:50 AM
To: 'Orwig, Paul'; 'Richard Sharpe'
Cc: 'samba-technical at lists.samba.org'
Subject: RE: winbindd problem


Hi Paul,
Just want to make sure I understand: 
when this fails, it fails right from startup?  And WHAT do you do to get it
to finally work again?
Don

-----Original Message-----
From: Orwig, Paul [mailto:PORWIG at PacificLife.com]
Sent: Tuesday, April 09, 2002 6:36 PM
To: 'Richard Sharpe'; Orwig, Paul
Cc: 'samba-technical at lists.samba.org'
Subject: RE: winbindd problem


1) We have joined the domain. Samba is running fine without winbind.
2) We have only this one copy of winbindd
3) We are using PAM_SMB without a problem.
4) ROOT# wbinfo -t
Secret is good

More ideas?

Paul

-----Original Message-----
From: Richard Sharpe [mailto:rsharpe at ns.aus.com]
Sent: Tuesday, April 09, 2002 4:28 PM
To: Orwig, Paul
Cc: 'samba-technical at lists.samba.org'
Subject: Re: winbindd problem


On Tue, 9 Apr 2002, Orwig, Paul wrote:

> Question:
> How does winbindd determine whether to do annonymous or authenticated
> queries?
> How does winbindd determine what user to authenticate with?
> Can winbindd be forced to use a specific user/password to query the PDC?

It uses the trust account info from the secrets database. You have to join 
the domain.
 
> Problem:
> winbindd seems to work intermittantly.
> wbinfo -u returns "Error looking up domain users"

I have seen a number of reasons for this:

1. You have not joined the domain
2. There are old copies of winbindd or smbd/nmbd from a different domain
3. There is no connectivity to the DC

Regards
-----
Richard Sharpe, rsharpe at ns.aus.com, rsharpe at samba.org, 
sharpe at ethereal.com