[Samba] AD-Shares not accessible with 3.0.31

Starting with version 3.0.31, it is not possible to access shares on a
Windows Server 2000 SP4, even though it is possible to join the domain
controlled by that Server.
The same configuration worked "fine" (for one hour) with 3.0.30.
What has changed? What do I need to configure or compile differently to
get back to 3.0.2x behaviour?

The commands
#> wbinfo -u
#> wbinfo -g
#> wbinfo -a DOMAIN\\Administrator%PASS
#> wbinfo -t
#> net ads testjoin -s /path_to_config
all work fine.

Replacing the 3.0.31 files one by one with 3.0.30 files again gives me a
somewhat working system, so it it must be something with 3.0.31.

Not my day :-(

The error log looks like this:

[2008/07/18 15:34:43, 10] smbd/sesssetup.c:reply_spnego_kerberos(364)
Mapped to [DOMAIN] (using PAC)
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_alloc(131)
Finding user DOMAIN\Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(75)
Trying _Get_Pwnam(), username as lowercase is candeo\administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(83)
Trying _Get_Pwnam(), username as given is DOMAIN\Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(93)
Trying _Get_Pwnam(), username as uppercase is DOMAIN\ADMINISTRATOR
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(102)
Checking combinations of 0 uppercase letters in candeo\administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(108)
Get_Pwnam_internals didn't find user [DOMAIN\Administrator]!
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_alloc(131)
Finding user Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(75)
Trying _Get_Pwnam(), username as lowercase is administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(83)
Trying _Get_Pwnam(), username as given is Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(93)
Trying _Get_Pwnam(), username as uppercase is ADMINISTRATOR
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(102)
Checking combinations of 0 uppercase letters in administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(108)
Get_Pwnam_internals didn't find user [Administrator]!
[2008/07/18 15:34:43, 10] nsswitch/winbindd.c:process_request(321)
process_request: request fn PING
[2008/07/18 15:34:43, 3] nsswitch/winbindd_misc.c:winbindd_ping(470)
[ 2360]: ping
[2008/07/18 15:34:43, 1] smbd/sesssetup.c:reply_spnego_kerberos(439)
Username DOMAIN\Administrator is invalid on this system
[2008/07/18 15:34:43, 3] smbd/error.c:error_packet_set(106)
error packet at smbd/sesssetup.c(444) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2008/07/18 15:34:43, 5] lib/util.c:show_msg(484)
[2008/07/18 15:34:43, 5] lib/util.c:show_msg(494)
size=35
smb_com=0x73
smb_rcls=109
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=65279
smb_uid=101
smb_mid=33152
smt_wct=0
smb_bcc=0



[global]
dos charset = ISO-8859-1
unix charset = ISO-8859-1
display charset = ISO-8859-1
workgroup = DOMAIN
realm = DOMAIN.TEST
server string = intradisk NASdrive (IP:%$(IPADDR))
interfaces = ixp0
security = ADS
allow trusted domains = No
password server = sbs2000.candeo.test
private dir = /var/lib/adsamba/private
passdb backend = tdbsam
guest account = samba
log level = 6
log file = /var/log/adsamba/smblog.ad
max log size = 0
name resolve order = wins bcast host
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = No
show add printer wizard = No
preferred master = No
local master = No
domain master = No
wins server = 192.168.1.4
idmap uid = 1000-60000
idmap gid = 1000-60000
winbind enum users = Yes
winbind enum groups = Yes
winbind offline logon = Yes
admin users = DOMAIN\\Administrator
ea support = Yes
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba

On Fri, Jul 18, 2008 at 03:50:21PM +0200, Jens Nissen wrote:
> Starting with version 3.0.31, it is not possible to access shares on a
> Windows Server 2000 SP4, even though it is possible to join the domain
> controlled by that Server.
> The same configuration worked "fine" (for one hour) with 3.0.30.
> What has changed? What do I need to configure or compile differently to
> get back to 3.0.2x behaviour?

Is it possible that you did not exchange libnss_winbind.so
in /lib?

Volker

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFIgKKDUzqjrWwMRl0RAkIPAJ0YwS9heH+vbaRrkdwEVb gQh61qegCfUuqh
ZdaesTFh+1TxUrv54jehBNg=
=L7Uo
-----END PGP SIGNATURE-----

Oops, something similar: I refreshed the ld.so.cache, now things work fine.

Version 3.0.31 is even able to do a trick, none of the predecessors
could do: If Samba started while the DC was down, it was not possible to
connect to the Samba shares without restarting Samba when the DC was
online.
3.0.31 solves this extremely ancient issue - I'm completely enthusiastic
(for the moment)!!

Many thanks,

Jens

Volker Lendecke wrote:
> On Fri, Jul 18, 2008 at 03:50:21PM +0200, Jens Nissen wrote:
>> Starting with version 3.0.31, it is not possible to access shares on a
>> Windows Server 2000 SP4, even though it is possible to join the domain
>> controlled by that Server.
>> The same configuration worked "fine" (for one hour) with 3.0.30.
>> What has changed? What do I need to configure or compile differently to
>> get back to 3.0.2x behaviour?
>
> Is it possible that you did not exchange libnss_winbind.so
> in /lib?
>
> Volker

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba