Bug 192 - authentication failing with security=DOMAIN and winbind
Summary: authentication failing with security=DOMAIN and winbind
Status: CLOSED FIXED
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: File Services (show other bugs)
Version: 3.0.0preX
Hardware: All AIX
: P2 normal
Target Milestone: none
Assignee: Gerald (Jerry) Carter (dead mail address)
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-06-27 07:33 UTC by Stephen Roylance
Modified: 2005-11-14 09:29 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Stephen Roylance 2003-06-27 07:33:55 UTC 
A previously working install with security=DOMAIN and winbind has started 
failing authentication since update to CVS 3_0 on 6/26.  The following entries 
in log.smbd seem relavant:
[2003/06/26 16:09:55, 2] smbd/sesssetup.c:setup_new_vc_session(504)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
[2003/06/26 16:09:55, 2] smbd/sesssetup.c:setup_new_vc_session(504)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old 
resources.
[2003/06/26 16:09:55, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(189)

and

[2003/06/26 16:09:57, 2] auth/auth.c:check_ntlm_password(295)
  check_ntlm_password:  Authentication for user [sdr] -> [sdr] FAILED with 
error NT_STATUS_NO_LOGON_SERVERS
Comment 1 Gerald (Jerry) Carter (dead mail address) 2003-07-01 08:27:37 UTC 
I need a lot more information.  Please attach your smb.conf and a level 
10 debug log.winbindd.
Comment 2 Gerald (Jerry) Carter (dead mail address) 2003-07-02 21:18:03 UTC 
Looks like the wins server is being mistakenly marked as dead.
I'm assuming a bcast name resolve won't work here either.

  resolve_wins: Attempting wins lookup for name DOMAIN<0x1c>
  Returning valid cache entry: key = WINS_SRV_DEAD/xxx.xxx.xxx.xxx,0.0.0.0, 
     value = DOWN, timeout = Wed Jul  2 17:40:04 2003
  wins_srv_is_dead: 132.183.126.12 is dead
Comment 3 Gerald (Jerry) Carter (dead mail address) 2003-07-02 21:54:09 UTC 
by bug (introduced by bad merge from APP_HEAD).  Don't worry 
about the timeout from name_query if we actually got
a response back.
Comment 4 Gerald (Jerry) Carter (dead mail address) 2005-02-07 08:39:31 UTC 
originally reported against 3.0.0beta1.  CLeaning out 
non-production release versions.
Comment 5 Gerald (Jerry) Carter (dead mail address) 2005-08-24 10:19:04 UTC 
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.
Comment 6 Gerald (Jerry) Carter (dead mail address) 2005-11-14 09:29:41 UTC 
database cleanup