We have a two domain (NT4) setup with a primary domain and a trusted domain. I'm trying to authenticate users on ssh using pam_winbind. Primary domain users can authenticate fine. Both primary and 'trusted domain' users can connect fine using smbclient. However, when a 'trusted domain' user tries to log on to ssh with the correct password, i get a internal module error (retval = 4, user = 'domain+user'). When the same user tries to log on with an wrong password I get an NT_STATUS_WRONG_PASSWORD. The same setup worked fine on version 3.0.22 (ubuntu dapper), I'm in the process of upgrading to hardy.
I did some testing with older versions and the problem started between version 3.0.24 and 3.0.26. That is 3.0.24 did not result in an internal module error, 3.0.26 did.
Can you please upload your winbindd logfiles ?
Created attachment 3573 [details] winbind logfiles attached are the winbind logfiles. To create the files I attempted one logon using a trusted domain account with a wrong password, followed by one attempt with the correct password. The internal module error is only thrown when the password is correct.
this is known to be working in recent and supported samba versions