Its working now for me (atleast per my requirements) the problem was nsswitch.conf, the moment winbind is added to the passwd and group lines, the problem starts appearing. In my case I only wanted to authenticate users using squid's ntlm authentication, that is now working, I still have to create dual accounts though, linux and samba.
--- Andrew Bartlett <[EMAIL PROTECTED]> wrote: > "Hesham S. Ahmed" wrote: > > > > Joining the PDC to the domain is successfull. And > > seems to work fine. Its just winbind that fails. > Below > > is my smb.conf and parts of log.winbindd. When I > do > > "wbinfo -t" I recieve the following error > > > > [root@hsalin var]# wbinfo -t > > checking the trust secret via RPC calls failed > > error code was NT_STATUS_UNSUCCESSFUL (0xc0000001) > > Could not check secret > > > > The log.winbindd below is associated with the > above > > message. > > > > ---- smb.conf ---- > > > > [global] > > workgroup = ZSQUID > > netbios name = hsalin > > server string = Samba 3.0alpha20 > > security = user > > > > encrypt passwords = Yes > > > > passdb backend = smbpasswd > > use spnego = No > > > > domain logons = Yes > > os level = 64 > > lm announce = Auto > > lm interval = 60 > > preferred master = Auto > > local master = Yes > > domain master = Auto > > browse list = Yes > > enhanced browsing = Yes > > wins support = Yes > > > > admin users = root > > > > winbind uid = 10000-20000 > > winbind gid = 10000-20000 > > template homedir = /home/%D/%U > > template shell = /bin/false > > winbind cache time = 15 > > winbind use default domain = Yes > > > > ; necessary share for domain controller > > [netlogon] > > path = /usr/local/samba/lib/netlogon > > read only = yes > > write list = ntadmin > > > > > > > > ---- log.winbindd ---- > > [2002/10/08 09:24:11, 3] > > nsswitch/winbindd_misc.c:winbindd_info(203) > > [11569]: request misc info > > [2002/10/08 09:24:18, 3] > > > nsswitch/winbindd_misc.c:winbindd_check_machine_acct(52) > > [11570]: check machine account > > [2002/10/08 09:24:18, 3] > > libsmb/namequery.c:resolve_lmhosts(721) > > resolve_lmhosts: Attempting lmhosts lookup for > name > > ZSQUID<0x1b> > > [2002/10/08 09:24:18, 3] > > libsmb/namequery.c:resolve_wins(628) > > resolve_wins: Attempting wins lookup for name > > ZSQUID<0x1b> > > [2002/10/08 09:24:18, 3] > > libsmb/namequery.c:resolve_wins(667) > > resolve_wins: using WINS server 127.0.0.1 and > tag > > '*' > > [2002/10/08 09:24:18, 2] > > libsmb/namequery.c:name_query(404) > > Got a positive name query response from > 127.0.0.1 ( > > 141.99.11.209 ) > > [2002/10/08 09:24:18, 3] > > nsswitch/winbindd_cm.c:cm_get_dc_name(281) > > cm_get_dc_name: Returning DC HSALIN > (141.99.11.209) > > for domain ZSQUID > > [2002/10/08 09:24:18, 3] > > nsswitch/winbindd_cm.c:cm_get_ipc_userpass(307) > > IPC$ connections done by user ZSQUID\root > > [2002/10/08 09:24:18, 3] > > libsmb/cliconnect.c:cli_full_connection(1199) > > Connecting to host=HSALIN share=IPC$ > > [2002/10/08 09:24:18, 3] > > lib/util_sock.c:open_socket_out(752) > > Connecting to 141.99.11.209 at port 445 > > [2002/10/08 09:24:39, 1] > > libsmb/cliconnect.c:cli_full_connection(1242) > > failed session setup with NT_STATUS_OK > > I need to know why this is happening. Can you turn > up the debug, or > possibly get a sniffer trace? > > Andrew Bartlett > > -- > Andrew Bartlett > [EMAIL PROTECTED] > Manager, Authentication Subsystems, Samba Team > [EMAIL PROTECTED] > Student Network Administrator, Hawker College > [EMAIL PROTECTED] > http://samba.org http://build.samba.org http://hawkerc.net __________________________________________________ Do you Yahoo!? Faith Hill - Exclusive Performances, Videos & More http://faith.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
