If you require and more information let me know and thanks in advance ..
I'm working with dansguardian and squid with ntlm_auth.
I join squid to the domain and it works for 7 days. After 7 days to the
minute from the time I joined the server to the domain winbind decides
it has lost its trust. And then squid cant utilize ntlm_auth as it
requires winbind to function properly. I'm using the packaged version
from Ubuntu Lucid.. samba 3.4.7..
I guess from what I've researched winbind isn't able to change or
doesn't get updated with the machine password? CAn I force this somehow?
Does it have anything to do with the fact I don't have an AD domain and
using security = domain?
security = user (winbind doesn't return users or groups with wbinfo and
squid will not authenticate.)
security = domain ( winbind works for 7 days as does squid, once the 7
days is up I have to rejoin the machine to the domain in order to get it
in a working condition..)
My DC is a samba server with openldap as it's backend.
wbinfo -t returns the following
checking the trust secret via RPC calls failed
error code was NT_STATUS_ACCESS_DENIED (0xc0000022)
Could not check secret
Below is a snipet of winbind.log
initialize_winbindd_cache: clearing cache and re-creating with
version number 1
[2011/05/19 08:57:27, 2] winbindd/winbindd_util.c:235(add_trusted_domain)
Added domain BUILTIN S-1-5-32
[2011/05/19 08:57:27, 2] winbindd/winbindd_util.c:235(add_trusted_domain)
Added domain APPSRV5 S-1-5-21-2430456434-2706775456-2994855025
[2011/05/19 08:57:27, 2] winbindd/winbindd_util.c:235(add_trusted_domain)
Added domain EXAMPLE S-1-5-21-496710657-683828429-1874078741
[2011/05/19 08:57:28, 3] libsmb/cliconnect.c:940(cli_session_setup_spnego)
Doing spnego session setup (blob length=58)
[2011/05/19 08:57:28, 3] libsmb/cliconnect.c:967(cli_session_setup_spnego)
got OID=1.3.6.1.4.1.311.2.2.10
[2011/05/19 08:57:28, 3] libsmb/cliconnect.c:975(cli_session_setup_spnego)
got principal=NONE
[2011/05/19 08:57:28, 3] libsmb/ntlmssp.c:1023(ntlmssp_client_challenge)
Got challenge flags:
[2011/05/19 08:57:28, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x60898215
[2011/05/19 08:57:28, 3] libsmb/ntlmssp.c:1045(ntlmssp_client_challenge)
NTLMSSP: Set final flags:
[2011/05/19 08:57:28, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x60088215
[2011/05/19 08:57:28, 3] libsmb/ntlmssp_sign.c:342(ntlmssp_sign_init)
NTLMSSP Sign/Seal - Initialising with flags:
[2011/05/19 08:57:28, 3] libsmb/ntlmssp.c:62(debug_ntlmssp_flags)
Got NTLMSSP neg_flags=0x60088215
[2011/05/19 08:57:28, 3] winbindd/winbindd_cm.c:570(cm_get_ipc_userpass)
cm_get_ipc_userpass: No auth-user defined
[2011/05/19 08:57:28, 1]
rpc_client/cli_pipe.c:949(cli_pipe_validate_current_pdu)
cli_pipe_validate_current_pdu: RPC fault code
DCERPC_FAULT_OP_RNG_ERROR received from host NETFILES2!
[2011/05/19 08:57:31, 3]
winbindd/winbindd_misc.c:754(winbindd_interface_version)
[10751]: request interface version
[2011/05/19 08:57:31, 3]
winbindd/winbindd_misc.c:787(winbindd_priv_pipe_dir)
[10751]: request location of privileged pipe
[2011/05/19 08:57:31, 3]
winbindd/winbindd_misc.c:34(winbindd_check_machine_acct)
[10751]: check machine account
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
