Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
[Samba] Samba 4 WBC_ERR_DOMAIN_NOT_FOUND
3,857 views
Skip to first unread message
steve
Dec 18, 2011, 9:10:02 AM12/18/11
to
Hi everyone
Ubuntu 11.10
Version 4.0.0alpha18-GIT-23a0343
Added a user called steve2. The first time I used winbind, no problems:
wbinfo -i steve2 gave me the info I needed for user and group.
But now it doesn't work:
wbinfo -i steve2
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user steve2
I can logon OK:
smbclient //localhost/home -Usteve2
Password for [SITE\steve2]:
smb: \>
Looking through the archives I found this:
Workaround:
1. Run sudo dpkg-reconfigure -plow libpam-runtime
2. Deselect "Winbind NT/Active Directory authentication"
3. Select OK
but I only have this:
PAM profiles to enable: │
│ │
│ [*] Unix authentication │
│ [*] Likewise Open │
│ [*] GNOME Keyring Daemon - Login keyring management │
│ [*] ConsoleKit Session Management │
│ [*] Inheritable Capabilities Management
IOW I can't do the workaround.
Any ideas anyone?
Thanks Steve.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Matthieu Patou
Dec 18, 2011, 3:30:02 PM12/18/11
to
On 18/12/2011 14:57, steve wrote:
> Hi everyone
>
> Ubuntu 11.10
> Version 4.0.0alpha18-GIT-23a0343
>
> Added a user called steve2. The first time I used winbind, no
> problems: wbinfo -i steve2 gave me the info I needed for user and group.
>
> But now it doesn't work:
> wbinfo -i steve2
> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
> Could not get info for user steve2
>
Are you using the wbinfo of samba 4 ?
> Hi everyone
>
> Ubuntu 11.10
> Version 4.0.0alpha18-GIT-23a0343
>
> Added a user called steve2. The first time I used winbind, no
> problems: wbinfo -i steve2 gave me the info I needed for user and group.
>
> But now it doesn't work:
> wbinfo -i steve2
> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
> Could not get info for user steve2
>
Matthieu.
--
Matthieu Patou
Samba Team
http://samba.org
steve
Dec 18, 2011, 4:30:02 PM12/18/11
to
On 12/18/2011 09:28 PM, Matthieu Patou wrote:
> On 18/12/2011 14:57, steve wrote:
>> Hi everyone
>>
>> Ubuntu 11.10
>> Version 4.0.0alpha18-GIT-23a0343
>>
>> Added a user called steve2. The first time I used winbind, no
>> problems: wbinfo -i steve2 gave me the info I needed for user and group.
>>
>> But now it doesn't work:
>> wbinfo -i steve2
>> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
>> Could not get info for user steve2
>>
> Are you using the wbinfo of samba 4 ?
>
>
> Matthieu.
>
Yes
> On 18/12/2011 14:57, steve wrote:
>> Hi everyone
>>
>> Ubuntu 11.10
>> Version 4.0.0alpha18-GIT-23a0343
>>
>> Added a user called steve2. The first time I used winbind, no
>> problems: wbinfo -i steve2 gave me the info I needed for user and group.
>>
>> But now it doesn't work:
>> wbinfo -i steve2
>> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
>> Could not get info for user steve2
>>
> Are you using the wbinfo of samba 4 ?
>
>
> Matthieu.
>
I have nothing from Samba 3 installed.
BTW, the error is the same on openSUSE 12.1, same GIT.
wbinfo works OK first time but fails thereafter.
Both installations pass the tests outlined in the wiki for dns and kerberos.
Steve
Matthieu Patou
Dec 18, 2011, 5:50:01 PM12/18/11
to
On 18/12/2011 22:26, steve wrote:
> On 12/18/2011 09:28 PM, Matthieu Patou wrote:
>> On 18/12/2011 14:57, steve wrote:
>>> Hi everyone
>>>
>>> Ubuntu 11.10
>>> Version 4.0.0alpha18-GIT-23a0343
>>>
>>> Added a user called steve2. The first time I used winbind, no
>>> problems: wbinfo -i steve2 gave me the info I needed for user and
>>> group.
>>>
>>> But now it doesn't work:
>>> wbinfo -i steve2
>>> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
>>> Could not get info for user steve2
>>>
>> Are you using the wbinfo of samba 4 ?
>>
>>
>> Matthieu.
>>
> Yes
> I have nothing from Samba 3 installed.
>
> BTW, the error is the same on openSUSE 12.1, same GIT.
>
> wbinfo works OK first time but fails thereafter.
>
> Both installations pass the tests outlined in the wiki for dns and
> kerberos.
>
For me it's ok unless I ask for an unknown user:
> On 12/18/2011 09:28 PM, Matthieu Patou wrote:
>> On 18/12/2011 14:57, steve wrote:
>>> Hi everyone
>>>
>>> Ubuntu 11.10
>>> Version 4.0.0alpha18-GIT-23a0343
>>>
>>> Added a user called steve2. The first time I used winbind, no
>>> problems: wbinfo -i steve2 gave me the info I needed for user and
>>> group.
>>>
>>> But now it doesn't work:
>>> wbinfo -i steve2
>>> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
>>> Could not get info for user steve2
>>>
>> Are you using the wbinfo of samba 4 ?
>>
>>
>> Matthieu.
>>
> Yes
> I have nothing from Samba 3 installed.
>
> BTW, the error is the same on openSUSE 12.1, same GIT.
>
> wbinfo works OK first time but fails thereafter.
>
> Both installations pass the tests outlined in the wiki for dns and
> kerberos.
>
mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false
mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i ares
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user ares
mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false
mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -u
Administrator
Guest
krbtgt
dns-ares
mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i Guest
TEST\Guest:*:3000013:3000014::/home/TEST/Guest:/bin/false
mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i dns-ares
TEST\dns-ares:*:3000015:100::/home/TEST/dns-ares:/bin/false
what wbinfo -u gives on your domain ?
> Steve
steve
Dec 19, 2011, 3:00:01 AM12/19/11
to
steve@hh3:~$ wbinfo -u
Error looking up domain users
root@hh3:/home/steve# wbinfo -u
Error looking up domain users
Some other stuff:
FQDN hh3.site
domain SITE
steve@hh3:~$ host -t SRV _kerberos._udp.hh3.site.
_kerberos._udp.hh3.site has SRV record 0 100 88 hh3.hh3.site.
steve@hh3:~$ kinit ste...@HH3.SITE
Password for ste...@HH3.SITE:
Warning: Your password will expire in 40 days on Sat Jan 28 20:18:06 2012
steve@hh3:~$ host hh3
hh3.hh3.site has address 192.168.1.3
steve@hh3:~$ smbclient //localhost/home -Usteve2
Password for [SITE\steve2]:
smb: \>
steve@hh3:~$ smbclient //hh3/home -Usteve2
smb: \>
Password for [SITE\steve2]:
Password for [SITE\steve2]:
Password for [SITE\steve2]:
Connection to \\hh3\home failed - NT_STATUS_LOGON_FAILURE
hh3 resolves fine, but hh3 is not resolved when using smbclient.
steve@hh3:~$ smbclient //192.168.1.3/home -Usteve2
Password for [SITE\steve2]:
smb: \>
DNS and kerberos seem OK. Is this Samba 4?
smb: \>
Now with everything as root:
root@hh3:/home/steve# smbclient //hh3.site/home -Uadministrator
Password for [SITE\administrator]:
Password for [SITE\administrator]:
Password for [SITE\administrator]:
Connection to \\hh3.site\home failed - NT_STATUS_LOGON_FAILURE
root@hh3:/home/steve# smbclient //localhost/home -Uadministrator
Password for [SITE\administrator]:
smb: \>
This suggests DNS is failing.
Adding winbind here makes no difference:(
/etc/nsswitch.conf
passwd: files ldap lsass
group: files ldap lsass
hosts: files dns mdns4_minimal [NOTFOUND=return] mdns4
Agghh!!
Steve.
Matthieu Patou
Dec 19, 2011, 5:10:02 AM12/19/11
to
Hi Steve
Increase log level and try to understand what's wrong in your log
>> For me it's ok unless I ask for an unknown user:
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
>> TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i ares
>> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
>> Could not get info for user ares
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
>> TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -u
>> Administrator
>> Guest
>> krbtgt
>> dns-ares
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i Guest
>> TEST\Guest:*:3000013:3000014::/home/TEST/Guest:/bin/false
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i dns-ares
>> TEST\dns-ares:*:3000015:100::/home/TEST/dns-ares:/bin/false
>>
>>
>> what wbinfo -u gives on your domain ?
>>
>>
>>> Steve
>>>
>>
>>
> /usr/local/samba/bin is in PATH
>
> steve@hh3:~$ wbinfo -u
> Error looking up domain users
>
> root@hh3:/home/steve# wbinfo -u
> Error looking up domain users
>
What is returned by which wbinfo ?
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
>> TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i ares
>> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
>> Could not get info for user ares
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
>> TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -u
>> Administrator
>> Guest
>> krbtgt
>> dns-ares
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i Guest
>> TEST\Guest:*:3000013:3000014::/home/TEST/Guest:/bin/false
>>
>> mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i dns-ares
>> TEST\dns-ares:*:3000015:100::/home/TEST/dns-ares:/bin/false
>>
>>
>> what wbinfo -u gives on your domain ?
>>
>>
>>> Steve
>>>
>>
>>
> /usr/local/samba/bin is in PATH
>
> steve@hh3:~$ wbinfo -u
> Error looking up domain users
>
> root@hh3:/home/steve# wbinfo -u
> Error looking up domain users
>
>
> root@hh3:/home/steve# smbclient //localhost/home -Uadministrator
> Password for [SITE\administrator]:
> smb: \>
>
> This suggests DNS is failing.
>
> Adding winbind here makes no difference:(
>
It's useless in your problem.
> root@hh3:/home/steve# smbclient //localhost/home -Uadministrator
> Password for [SITE\administrator]:
> smb: \>
>
> This suggests DNS is failing.
>
> Adding winbind here makes no difference:(
>
> /etc/nsswitch.conf
>
> passwd: files ldap lsass
> group: files ldap lsass
> hosts: files dns mdns4_minimal [NOTFOUND=return] mdns4
>
> Agghh!!
> Steve.
>
>
>
--
>
> passwd: files ldap lsass
> group: files ldap lsass
> hosts: files dns mdns4_minimal [NOTFOUND=return] mdns4
>
> Agghh!!
> Steve.
>
>
>
--
steve
Dec 19, 2011, 1:20:02 PM12/19/11
to
Works fine up until samba is restarted. That is when wbinfo and all else
fails. Samba does not survive the restart and nothing works thereafter.
Where can I start looking?
Thanks, Steve.
steve
Dec 19, 2011, 1:30:02 PM12/19/11
to
steve
Dec 20, 2011, 9:10:01 AM12/20/11
to
these versions at least.
Start samba -i -M single and winbindd -i -S in separate shells.
Is there a way to be able do this as one command?
Thanks
Steve
steve
Dec 20, 2011, 5:40:02 PM12/20/11
to
Works for a while, then falls over:
wbinfo -u
hh3$
administrator
dns-hh3
krbtgt
guest
lynn2
wbinfo -i lynn2
Here is the log:
hh3:/home/steve # winbindd -i -S -d=4
winbindd version 4.0.0alpha18-GIT-bfc7481 started.
Copyright Andrew Tridgell and the Samba Team 1992-2011
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
params.c:pm_process() - Processing configuration file
"/usr/local/samba/etc/smb.conf"
Processing section "[global]"
doing parameter server role = domain controller
doing parameter workgroup = SITE
doing parameter realm = hh3.site
doing parameter netbios name = HH3
doing parameter passdb backend = samba4
pm_process() returned Yes
Registered MSG_REQ_POOL_USAGE
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
params.c:pm_process() - Processing configuration file
"/usr/local/samba/etc/smb.conf"
Processing section "[global]"
doing parameter server role = domain controller
doing parameter workgroup = SITE
doing parameter realm = hh3.site
doing parameter netbios name = HH3
doing parameter passdb backend = samba4
pm_process() returned Yes
added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
netmask=255.255.255.0
added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
netmask=255.255.255.0
TimeInit: Serverzone is -3600
initialize_winbindd_cache: clearing cache and re-creating with version
number 2
ldb_wrap open of idmap.ldb
Added domain BUILTIN S-1-5-32
Added domain SITE S-1-5-21-821565856-2698423283-2299657328
Home server: hh3
Home server: hh3
get_privileges: No privileges assigned to SID [S-1-22-1-0]
get_privileges: No privileges assigned to SID [S-1-22-2-0]
get_privileges: No privileges assigned to SID [S-1-5-2]
get_privileges: No privileges assigned to SID [S-1-5-11]
child daemon request 51
Finished processing child request 51
child daemon request 20
[ 3378]: list trusted domains
samr: trusted domains
Create pipe requested \lsarpc
Created internal pipe \lsarpc
_lsa_OpenPolicy2: ACCESS should be DENIED (requested: 0x000f0fff)
but overritten by euid == sec_initial_uid()
_lsa_OpenPolicy2: access GRANTED (requested: 0x000f0fff, granted:
0x000f0fff)
Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F1 4E
3D 0D ........ .....N=.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F1 4E
3D 0D ........ .....N=.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F1 4E
3D 0D ........ .....N=.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F1 4E
3D 0D ........ .....N=.
[0010] 34 0D 00 00 4...
Closed policy
Finished processing child request 20
[ 3381]: request interface version
[ 3381]: request location of privileged pipe
getpwnam lynn2
child daemon request 59
sam_name_to_sid
Create pipe requested \lsarpc
Created internal pipe \lsarpc
_lsa_OpenPolicy2: ACCESS should be DENIED (requested: 0x000f0fff)
but overritten by euid == sec_initial_uid()
_lsa_OpenPolicy2: access GRANTED (requested: 0x000f0fff, granted:
0x000f0fff)
Opened policy hnd[1] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
name_to_sid: SITE\LYNN2 for domain SITE
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Home server: hh3
Home server: hh3
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Closed policy
samr: sequence number
Create pipe requested \samr
Created internal pipe \samr
_samr_Connect2: ACCESS should be DENIED (requested: 0x000f003f)
but overritten by euid == sec_initial_uid()
_samr_Connect2: access GRANTED (requested: 0x000f003f, granted: 0x000f003f)
Opened policy hnd[1] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
_samr_OpenDomain: ACCESS should be DENIED (requested: 0x000f07ff)
but overritten by euid == sec_initial_uid()
_samr_OpenDomain: access GRANTED (requested: 0x000f07ff, granted:
0x000f07ff)
Opened policy hnd[2] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Closed policy
Finished processing child request 59
child daemon request 59
sam_query_user
Create pipe requested \samr
Created internal pipe \samr
_samr_Connect2: ACCESS should be DENIED (requested: 0x000f003f)
but overritten by euid == sec_initial_uid()
_samr_Connect2: access GRANTED (requested: 0x000f003f, granted: 0x000f003f)
Opened policy hnd[1] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
_samr_OpenDomain: ACCESS should be DENIED (requested: 0x000f07ff)
but overritten by euid == sec_initial_uid()
_samr_OpenDomain: access GRANTED (requested: 0x000f07ff, granted:
0x000f07ff)
Opened policy hnd[2] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
_samr_OpenUser: ACCESS should be DENIED (requested: 0x000f07ff)
but overritten by euid == sec_initial_uid()
_samr_OpenUser: access GRANTED (requested: 0x000f07ff, granted: 0x000f07ff)
Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
User:[lynn2]
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Closed policy
Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Closed policy
Finished processing child request 59
child daemon request 59
sam_sid_to_name
Create pipe requested \lsarpc
Created internal pipe \lsarpc
_lsa_OpenPolicy2: ACCESS should be DENIED (requested: 0x000f0fff)
but overritten by euid == sec_initial_uid()
_lsa_OpenPolicy2: access GRANTED (requested: 0x000f0fff, granted:
0x000f0fff)
Opened policy hnd[1] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Closed policy
Finished processing child request 59
child daemon request 59
idmap range not specified for domain *
Finished processing child request 59
Anyone have any ideas about this?
Thanks.
Steve.
wbinfo -u
hh3$
administrator
dns-hh3
krbtgt
guest
lynn2
wbinfo -i lynn2
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user lynn2
Here is the log:
hh3:/home/steve # winbindd -i -S -d=4
winbindd version 4.0.0alpha18-GIT-bfc7481 started.
Copyright Andrew Tridgell and the Samba Team 1992-2011
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
params.c:pm_process() - Processing configuration file
"/usr/local/samba/etc/smb.conf"
Processing section "[global]"
doing parameter server role = domain controller
doing parameter workgroup = SITE
doing parameter realm = hh3.site
doing parameter netbios name = HH3
doing parameter passdb backend = samba4
pm_process() returned Yes
Registered MSG_REQ_POOL_USAGE
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
params.c:pm_process() - Processing configuration file
"/usr/local/samba/etc/smb.conf"
Processing section "[global]"
doing parameter server role = domain controller
doing parameter workgroup = SITE
doing parameter realm = hh3.site
doing parameter netbios name = HH3
doing parameter passdb backend = samba4
pm_process() returned Yes
added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
netmask=255.255.255.0
added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
netmask=255.255.255.0
TimeInit: Serverzone is -3600
initialize_winbindd_cache: clearing cache and re-creating with version
number 2
ldb_wrap open of idmap.ldb
Added domain BUILTIN S-1-5-32
Added domain SITE S-1-5-21-821565856-2698423283-2299657328
Home server: hh3
Home server: hh3
get_privileges: No privileges assigned to SID [S-1-22-1-0]
get_privileges: No privileges assigned to SID [S-1-22-2-0]
get_privileges: No privileges assigned to SID [S-1-5-2]
get_privileges: No privileges assigned to SID [S-1-5-11]
child daemon request 51
Finished processing child request 51
child daemon request 20
[ 3378]: list trusted domains
samr: trusted domains
Create pipe requested \lsarpc
Created internal pipe \lsarpc
_lsa_OpenPolicy2: ACCESS should be DENIED (requested: 0x000f0fff)
but overritten by euid == sec_initial_uid()
_lsa_OpenPolicy2: access GRANTED (requested: 0x000f0fff, granted:
0x000f0fff)
Opened policy hnd[1] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F1 4E
3D 0D ........ .....N=.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F1 4E
3D 0D ........ .....N=.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F1 4E
3D 0D ........ .....N=.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 01 00 00 00 00 00 00 00 F1 4E
3D 0D ........ .....N=.
[0010] 34 0D 00 00 4...
Closed policy
Finished processing child request 20
[ 3381]: request interface version
[ 3381]: request location of privileged pipe
getpwnam lynn2
child daemon request 59
sam_name_to_sid
Create pipe requested \lsarpc
Created internal pipe \lsarpc
_lsa_OpenPolicy2: ACCESS should be DENIED (requested: 0x000f0fff)
but overritten by euid == sec_initial_uid()
_lsa_OpenPolicy2: access GRANTED (requested: 0x000f0fff, granted:
0x000f0fff)
Opened policy hnd[1] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
name_to_sid: SITE\LYNN2 for domain SITE
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Home server: hh3
Home server: hh3
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 02 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Closed policy
samr: sequence number
Create pipe requested \samr
Created internal pipe \samr
_samr_Connect2: ACCESS should be DENIED (requested: 0x000f003f)
but overritten by euid == sec_initial_uid()
_samr_Connect2: access GRANTED (requested: 0x000f003f, granted: 0x000f003f)
Opened policy hnd[1] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 03 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
_samr_OpenDomain: ACCESS should be DENIED (requested: 0x000f07ff)
but overritten by euid == sec_initial_uid()
_samr_OpenDomain: access GRANTED (requested: 0x000f07ff, granted:
0x000f07ff)
Opened policy hnd[2] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 04 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Closed policy
Finished processing child request 59
child daemon request 59
sam_query_user
Create pipe requested \samr
Created internal pipe \samr
_samr_Connect2: ACCESS should be DENIED (requested: 0x000f003f)
but overritten by euid == sec_initial_uid()
_samr_Connect2: access GRANTED (requested: 0x000f003f, granted: 0x000f003f)
Opened policy hnd[1] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 05 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
_samr_OpenDomain: ACCESS should be DENIED (requested: 0x000f07ff)
but overritten by euid == sec_initial_uid()
_samr_OpenDomain: access GRANTED (requested: 0x000f07ff, granted:
0x000f07ff)
Opened policy hnd[2] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
_samr_OpenUser: ACCESS should be DENIED (requested: 0x000f07ff)
but overritten by euid == sec_initial_uid()
_samr_OpenUser: access GRANTED (requested: 0x000f07ff, granted: 0x000f07ff)
Opened policy hnd[3] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
User:[lynn2]
Found policy hnd[0] [0000] 00 00 00 00 07 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Closed policy
Found policy hnd[0] [0000] 00 00 00 00 06 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Closed policy
Finished processing child request 59
child daemon request 59
sam_sid_to_name
Create pipe requested \lsarpc
Created internal pipe \lsarpc
_lsa_OpenPolicy2: ACCESS should be DENIED (requested: 0x000f0fff)
but overritten by euid == sec_initial_uid()
_lsa_OpenPolicy2: access GRANTED (requested: 0x000f0fff, granted:
0x000f0fff)
Opened policy hnd[1] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Found policy hnd[0] [0000] 00 00 00 00 08 00 00 00 00 00 00 00 F1 4E
47 0D ........ .....NG.
[0010] 34 0D 00 00 4...
Closed policy
Finished processing child request 59
child daemon request 59
idmap range not specified for domain *
Finished processing child request 59
Anyone have any ideas about this?
Thanks.
Steve.
David Roid
Dec 21, 2011, 1:20:01 AM12/21/11
to
Hi Steve,
Do you have
idmap config * : backend = ...
idmap config * : range = ...
in your smb.conf (besides domain specific backend and range)?
Regards
-David
2011/12/21 steve <st...@steve-ss.com>
> Works for a while, then falls over:
>
> wbinfo -u
> hh3$
> administrator
> dns-hh3
> krbtgt
> guest
> lynn2
>
> wbinfo -i lynn2
> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
> Could not get info for user lynn2
>
> Here is the log:
>
> hh3:/home/steve # winbindd -i -S -d=4
> winbindd version 4.0.0alpha18-GIT-bfc7481 started.
> Copyright Andrew Tridgell and the Samba Team 1992-2011
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> params.c:pm_process() - Processing configuration file
> "/usr/local/samba/etc/smb.**conf"
> instructions: https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mailman/options/samba>
Do you have
idmap config * : backend = ...
idmap config * : range = ...
in your smb.conf (besides domain specific backend and range)?
Regards
-David
2011/12/21 steve <st...@steve-ss.com>
> Works for a while, then falls over:
>
> wbinfo -u
> hh3$
> administrator
> dns-hh3
> krbtgt
> guest
> lynn2
>
> wbinfo -i lynn2
> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
> Could not get info for user lynn2
>
> Here is the log:
>
> hh3:/home/steve # winbindd -i -S -d=4
> winbindd version 4.0.0alpha18-GIT-bfc7481 started.
> Copyright Andrew Tridgell and the Samba Team 1992-2011
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> params.c:pm_process() - Processing configuration file
> Processing section "[global]"
> doing parameter server role = domain controller
> doing parameter workgroup = SITE
> doing parameter realm = hh3.site
> doing parameter netbios name = HH3
> doing parameter passdb backend = samba4
> pm_process() returned Yes
> Registered MSG_REQ_POOL_USAGE
> Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> params.c:pm_process() - Processing configuration file
> "/usr/local/samba/etc/smb.**conf"
> doing parameter server role = domain controller
> doing parameter workgroup = SITE
> doing parameter realm = hh3.site
> doing parameter netbios name = HH3
> doing parameter passdb backend = samba4
> pm_process() returned Yes
> Registered MSG_REQ_POOL_USAGE
> Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> params.c:pm_process() - Processing configuration file
> Processing section "[global]"
> doing parameter server role = domain controller
> doing parameter workgroup = SITE
> doing parameter realm = hh3.site
> doing parameter netbios name = HH3
> doing parameter passdb backend = samba4
> pm_process() returned Yes
> added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
> netmask=255.255.255.0
> added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
> netmask=255.255.255.0
> TimeInit: Serverzone is -3600
> initialize_winbindd_cache: clearing cache and re-creating with version
> number 2
> ldb_wrap open of idmap.ldb
> Added domain BUILTIN S-1-5-32
> Added domain SITE S-1-5-21-821565856-2698423283-**2299657328
> doing parameter server role = domain controller
> doing parameter workgroup = SITE
> doing parameter realm = hh3.site
> doing parameter netbios name = HH3
> doing parameter passdb backend = samba4
> pm_process() returned Yes
> added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
> netmask=255.255.255.0
> added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
> netmask=255.255.255.0
> TimeInit: Serverzone is -3600
> initialize_winbindd_cache: clearing cache and re-creating with version
> number 2
> ldb_wrap open of idmap.ldb
> Added domain BUILTIN S-1-5-32
steve
Dec 21, 2011, 4:10:02 AM12/21/11
to
On 21/12/11 07:18, David Roid wrote:
> Hi Steve,
>
> Do you have
>
> idmap config * : backend = ...
> idmap config * : range = ...
>
> in your smb.conf (besides domain specific backend and range)?
>
> Regards
> -David
Hi
> Hi Steve,
>
> Do you have
>
> idmap config * : backend = ...
> idmap config * : range = ...
>
> in your smb.conf (besides domain specific backend and range)?
>
> Regards
> -David
No. I just followed the samba howto in the wiki.
I have:
cat /usr/local/samba/etc/smb.conf
# Global parameters
server role = domain controller
realm = hh3.site
netbios name = HH3
passdb backend = samba4
[netlogon]
path = /usr/local/samba/var/locks/sysvol/hh3.site/scripts
read only = No
[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No
[home]
path = /home/CACTUS
read only = No
I'm wondering if this maybe a hardware issue. I'm testing on an 8 year
old acer laptop with 512Mb and a 16Gb usb memory as hard disk. Now, for
example it's working. But in 5 minutes maybe not.
Should I have the idmap stuff you mention?
e.g. a user I created has this:
CACTUS\steve2:*:3000006:100::/home/CACTUS/steve2:/bin/false
Thanks for the reply.
Steve.
>
> 2011/12/21 steve <st...@steve-ss.com <mailto:st...@steve-ss.com>>
>
> Works for a while, then falls over:
>
> wbinfo -u
> hh3$
> administrator
> dns-hh3
> krbtgt
> guest
> lynn2
>
> wbinfo -i lynn2
> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
> Could not get info for user lynn2
>
> Here is the log:
>
> hh3:/home/steve # winbindd -i -S -d=4
> winbindd version 4.0.0alpha18-GIT-bfc7481 started.
> Copyright Andrew Tridgell and the Samba Team 1992-2011
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit
> (16384)
> params.c:pm_process() - Processing configuration file
> "/usr/local/samba/etc/smb.conf"
> Works for a while, then falls over:
>
> wbinfo -u
> hh3$
> administrator
> dns-hh3
> krbtgt
> guest
> lynn2
>
> wbinfo -i lynn2
> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
> Could not get info for user lynn2
>
> Here is the log:
>
> hh3:/home/steve # winbindd -i -S -d=4
> winbindd version 4.0.0alpha18-GIT-bfc7481 started.
> Copyright Andrew Tridgell and the Samba Team 1992-2011
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit
> (16384)
> params.c:pm_process() - Processing configuration file
> Processing section "[global]"
> doing parameter server role = domain controller
> doing parameter workgroup = SITE
> doing parameter realm = hh3.site
> doing parameter netbios name = HH3
> doing parameter passdb backend = samba4
> pm_process() returned Yes
> Registered MSG_REQ_POOL_USAGE
> Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit
> (16384)
> params.c:pm_process() - Processing configuration file
> "/usr/local/samba/etc/smb.conf"
> doing parameter server role = domain controller
> doing parameter workgroup = SITE
> doing parameter realm = hh3.site
> doing parameter netbios name = HH3
> doing parameter passdb backend = samba4
> pm_process() returned Yes
> Registered MSG_REQ_POOL_USAGE
> Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
> lp_load_ex: refreshing parameters
> Initialising global parameters
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit
> (16384)
> params.c:pm_process() - Processing configuration file
> Processing section "[global]"
> doing parameter server role = domain controller
> doing parameter workgroup = SITE
> doing parameter realm = hh3.site
> doing parameter netbios name = HH3
> doing parameter passdb backend = samba4
> pm_process() returned Yes
> added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
> netmask=255.255.255.0
> added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
> netmask=255.255.255.0
> TimeInit: Serverzone is -3600
> initialize_winbindd_cache: clearing cache and re-creating with
> version number 2
> ldb_wrap open of idmap.ldb
> Added domain BUILTIN S-1-5-32
> Added domain SITE S-1-5-21-821565856-2698423283-2299657328
> doing parameter server role = domain controller
> doing parameter workgroup = SITE
> doing parameter realm = hh3.site
> doing parameter netbios name = HH3
> doing parameter passdb backend = samba4
> pm_process() returned Yes
> added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
> netmask=255.255.255.0
> added interface eth1 ip=192.168.1.3 bcast=192.168.1.255
> netmask=255.255.255.0
> TimeInit: Serverzone is -3600
> initialize_winbindd_cache: clearing cache and re-creating with
> version number 2
> ldb_wrap open of idmap.ldb
> Added domain BUILTIN S-1-5-32
0 new messages