[svlug] Samba error

[Eric N. Valor]

Thanks.  I've been futzing with the krb5.conf file and seem to have
corrected a few mistakes made by another (I'm taking over this project).
I've got getent and wbinfo working now, but still no joy on
connections.  

I get this in syslog:

2006/08/03 16:47:10, 2] auth/auth.c:check_ntlm_password(312) 
  check_ntlm_password:  Authentication for user [valor] -> [valor]
FAILED with error NT_STATUS_NO_SUCH_USER

Should "wbinfo -m" show me the ADS domain?  It only shows me the
machine's hostname and "BUILTIN".

Also, my ADS domain and BIND domain are different (if that matters
here).

On Thu, 2006-08-03 at 16:31 -0700, Tony Hartzell wrote:
> I saw similar behavior with machines on networks connected via a bridge.
> It's been about 5 years since I had the problem, but I think I had to
> explicitly set the "interfaces", "password server" & "wins server" in
> the global section of smb.conf...there's something else rattling around
> in my head that I can't think of right now, but it seems that something
> I saw in the log.[sn]mbd files pointed me to its solution.
> 			Tony Hartzell
> P.S. I seem to recall that even after it started working, connections
> were very slow, but xfers were fast.
> 
> -----Original Message-----
> From: svlug-bounces+hartzellt=charter.net at lists.svlug.org
> [mailto:svlug-bounces+hartzellt=charter.net at lists.svlug.org] On Behalf
> Of Eric N. Valor
> Sent: Wednesday, August 02, 2006 3:07 PM
> To: svlug at lists.svlug.org
> Subject: [svlug] Samba error
> 
> Here's one which is vexing me mightily.  I have a Samba server
> (3.0.14a-Debian) that works perfectly in my Active Directory network.  I
> have another (essentially a duplicate, different hostname of course)
> that does not.
> 
> >From the syslog of the failing machine (while attempting to connect a
> Windows PC to a share):
> 
> Aug  2 14:08:18 localhost nss_wins[13755]: [2006/08/02 14:08:18, 0]
> lib/util_sock.c:get_peer_addr(1150)  
> Aug  2 14:08:18 localhost nss_wins[13755]:   getpeername failed. Error
> was Transport endpoint is not connected 
> Aug  2 14:08:18 localhost nss_wins[13755]: [2006/08/02 14:08:18, 0]
> lib/util_sock.c:write_socket_data(430)  
> Aug  2 14:08:18 localhost nss_wins[13755]:   write_socket_data: write
> failure. Error = Connection reset by peer 
> Aug  2 14:08:18 localhost nss_wins[13755]: [2006/08/02 14:08:18, 0]
> lib/util_sock.c:write_socket(455)  
> Aug  2 14:08:18 localhost nss_wins[13755]:   write_socket: Error writing
> 4 bytes to socket 26: ERRNO = Connection reset by peer  
> Aug  2 14:08:18 localhost nss_wins[13534]: [2006/08/02 14:08:18, 1]
> nsswitch/winbindd_user.c:winbindd_fill_pwent(50) 
> Aug  2 14:08:18 localhost nss_wins[13534]:   error getting user id for
> sid <sid> 
> Aug  2 14:08:18 localhost nss_wins[13534]: [2006/08/02 14:08:18, 1]
> nsswitch/winbindd_user.c:winbindd_fill_pwent(50) 
> Aug  2 14:08:18 localhost nss_wins[13534]:   error getting user id for
> sid <sid>
> 
> . . .
> 
> Aug  2 14:08:18 localhost nss_wins[13534]:   error getting user id for
> sid <sid>
> Aug  2 14:08:18 localhost nss_wins[13754]: [2006/08/02 14:08:18, 0]
> auth/auth_util.c:make_server_info_info3(1195) 
> Aug  2 14:08:18 localhost nss_wins[13754]:   make_server_info_info3:
> pdb_init_sam failed!  
> Aug  2 14:08:18 localhost nss_wins[13755]: [2006/08/02 14:08:18, 0]
> lib/util_sock.c:send_smb(647)  
> Aug  2 14:08:18 localhost nss_wins[13755]:   Error writing 4 bytes to
> client. -1. (Connection reset by peer)
> 
> >From the log.<user>:
> 
> [2006/08/02 14:08:18, 0] auth/auth_util.c:make_server_info_info3(1195) 
>   make_server_info_info3: pdb_init_sam failed! 
> 
> 
> The share doesn't appear while browsing, and directly trying to mount 
> \\server\share brings up a login prompt which always fails, producing
> this extra bit in syslog:
> 
> Aug  2 15:04:53 localhost nss_wins[13793]: [2006/08/02 15:04:53, 1]
> nsswitch/winbindd_user.c:winbindd_fill_pwent(50) 
> Aug  2 15:04:53 localhost nss_wins[13793]:   error getting user id for
> sid <sid> 
> Aug  2 15:04:53 localhost nss_wins[13793]: [2006/08/02 15:04:53, 1]
> nsswitch/winbindd_user.c:winbindd_fill_pwent(50) 
> Aug  2 15:04:53 localhost nss_wins[13793]:   error getting user id for
> sid <sid>
> Aug  2 15:04:53 localhost nss_wins[13920]: [2006/08/02 15:04:53, 1]
> smbd/sesssetup.c:reply_spnego_kerberos(250)  
> Aug  2 15:04:53 localhost nss_wins[13920]:   Username <domain>\<pcname>
> is invalid on this system  
> 
> Interesting that the PC name is used here (?)
> 
> I've tried Googling to no avail; just other people asking the same
> question without any answers being posted.
> 
> Any ideas?
> 
> 
-- 
Eric N. Valor
ericv at cruzio.com
PGP Key 2048/1024 227B04CB
Key Fingerprint = 766C CA15 0FFF E54B 2FEE  C7D7 0F87 3AFB 227B 04CB

: This Space Intentionally Left Blank :
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://kenny.linuxmafia.com/pipermail/svlug/attachments/20060803/8726042e/attachment.pgp