Hi everyone,

after upgrading my samba PDC (with running winbindd on the same machine) from 3.0.28a to 3.0.31, I must determine, that some strange entry's were made by the smbd daemon and authentication from clients weren't possible::

[2008/07/17 10:30:53, 0] passdb/pdb_tdb.c:tdbsam_open(829)
  tdbsam_open: Failed to open/create TDB passwd [/etc/samba/private/passdb.tdb]
[2008/07/17 10:30:53, 0] passdb/pdb_tdb.c:tdb_update_sam(1346)
  tdbsam_getsampwnam: failed to open /etc/samba/private/passdb.tdb!

I found out, that if I stop the winbindd daemon, everything work as it should be. No errors occur in the smbd log-file and authentication works.

Next step was, to play around with some parameters in smb.conf.
Removing "idmap backend = tdb" solved the problem.
From now on, the 3 services (smbd, nmbd, winbindd) are able to run on the same machine, without the mentioned errors.

Why this parameter worked in 3.0.28a and do not in 3.0.31?
Is this a bug or a feature by the latest code-changing of winbindd?

My config:

        pid directory = /var/run
        unix charset = ISO8859-1
        display charset = ISO8859-1
        netbios name = %h
        name resolve order = host bcast
        log level = 1
        max log size = 5000
        deny hosts = ALL EXCEPT 192.168.1.0/24 127. 0.0.0.0/0
        time server = yes
        allow hosts = 127. 192.168.1.0/24 0.0.0.0/0
        hide unreadable = yes
        logon script = scripts\%G.cmd
        logon home = 
        logon path = 
        local master = yes
        workgroup = DOMAIN
        os level = 99
        security = user
        read raw = yes
        write raw = yes
        socket options = SO_KEEPALIVE TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=16384
        domain master = yes
        passdb backend = tdbsam:/etc/samba/private/passdb.tdb
        interfaces = eth0 lo
        bind interfaces only = yes
        encrypt passwords = yes
        public = yes
        server string = %h on SMB %v
        preferred master = yes
        domain logons = yes
        show add printer wizard = no
        veto files =/.*/
        lanman auth = no
        lm announce = no
        min protocol = NT1
        use client driver = no
        load printers = no
        restrict anonymous = 1
        use sendfile = yes
        dns proxy = yes
        wins proxy = yes
        idmap uid = 20000-30000
        idmap gid = 20000-30000
##        idmap backend = tdb
        winbind enum users = no
        winbind enum groups = no


Greets,
Michael