I'm trying to learn about the interactions between SAMBA and win2k DCs. The eventual goal is to have a Win2k server with ADS working with a freeBSD SAMBA server. I've used the setup from http://oslabs.mikro-net.com/fbsd_samba.html as the basis for what I've done so far. Winbind seems to work and I can show users and groups using wbinfo although I see some things in the logs that I haven't been able to figure out.
I'm using a native Win2k ADS domain, but when winbindd is starting up my log shows HOME is an NT4 domain... Home was an mixed mode domain when I first started working with SAMBA, but I have converted it since then. I thought I had removed all traces of the old domain from SAMBA, and rejoined the ADS domain. Do ADS domains still show NT4 in the log? or do I have something messed up? If there's a better reference for the log messages, please point me in the right direction. Thanks for the help, Joe In this log snippets: - home.local is the Win2k domain - frosty.home.local is the DC - kara.home.local is the Samba box. [2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173) add_trusted_domain: HOME is an NT4 domain [2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180) Added domain HOME HOME.LOCAL S-0-0 ... [2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173) add_trusted_domain: BUILTIN is an NT4 domain [2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180) Added domain BUILTIN S-1-5-32 [2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173) add_trusted_domain: KARA is an NT4 domain [2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180) Added domain KARA S-1-5-21-3424855220-147354258-856157331 --------complete winbind log (level 5)---------------- winbindd version 3.0.4 started. Copyright The Samba Team 2000-2004 [2004/07/20 20:08:31, 2] param/loadparm.c:do_section(3392) Processing section "[homes]" [2004/07/20 20:08:31, 2] param/loadparm.c:do_section(3392) Processing section "[storage]" [2004/07/20 20:08:31, 3] param/loadparm.c:lp_add_ipc(2359) adding IPC service [2004/07/20 20:08:31, 3] param/loadparm.c:lp_add_ipc(2359) adding IPC service [2004/07/20 20:08:31, 2] lib/interface.c:add_interface(79) added interface ip=10.0.0.102 bcast=10.0.0.255 nmask=255.255.255.0 [2004/07/20 20:08:31, 2] lib/interface.c:add_interface(79) added interface ip=10.0.0.102 bcast=10.0.0.255 nmask=255.255.255.0 [2004/07/20 20:08:31, 2] lib/tallocmsg.c:register_msg_pool_usage(57) Registered MSG_REQ_POOL_USAGE [2004/07/20 20:08:31, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71) Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED [2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173) add_trusted_domain: HOME is an NT4 domain [2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180) Added domain HOME HOME.LOCAL S-0-0 [2004/07/20 20:08:31, 3] libads/ldap.c:ads_connect(218) Connected to LDAP server 10.0.0.100 [2004/07/20 20:08:31, 3] libads/ldap.c:ads_server_info(2029) got ldap server name [EMAIL PROTECTED], using bind path: dc=HOME,dc=LOCAL [2004/07/20 20:08:31, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(110) IPC$ connections done anonymously [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_start_connection(1373) Connecting to host=FROSTY [2004/07/20 20:08:31, 3] lib/util_sock.c:open_socket_out(735) Connecting to 10.0.0.100 at port 445 [2004/07/20 20:08:31, 5] nsswitch/winbindd_cm.c:cm_open_connection(256) connecting to FROSTY from KARA with kerberos principal [EMAIL PROTECTED] [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(705) Doing spnego session setup (blob length=106) [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 2 840 48018 1 2 2 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 2 840 113554 1 2 2 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 2 840 113554 1 2 2 3 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 3 6 1 4 1 311 2 2 10 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(737) got [EMAIL PROTECTED] [2004/07/20 20:08:31, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(535) Doing kerberos session setup [2004/07/20 20:08:31, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(245) Ticket in ccache[MEMORY:cliconnect] expiration Wed, 21 Jul 2004 06:08:31 GMT [2004/07/20 20:08:31, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181) lsa_io_sec_qos: length c does not match size 8 [2004/07/20 20:08:31, 3] nsswitch/winbindd_ads.c:alternate_name(932) ads: alternate_name [2004/07/20 20:08:31, 3] libads/ldap.c:ads_connect(218) Connected to LDAP server 10.0.0.100 [2004/07/20 20:08:31, 3] libads/ldap.c:ads_server_info(2029) got ldap server name [EMAIL PROTECTED], using bind path: dc=HOME,dc=LOCAL [2004/07/20 20:08:31, 3] libads/sasl.c:ads_sasl_spnego_bind(204) got OID=1 2 840 48018 1 2 2 [2004/07/20 20:08:31, 3] libads/sasl.c:ads_sasl_spnego_bind(204) got OID=1 2 840 113554 1 2 2 [2004/07/20 20:08:31, 3] libads/sasl.c:ads_sasl_spnego_bind(204) got OID=1 2 840 113554 1 2 2 3 [2004/07/20 20:08:31, 3] libads/sasl.c:ads_sasl_spnego_bind(204) got OID=1 3 6 1 4 1 311 2 2 10 [2004/07/20 20:08:31, 3] libads/sasl.c:ads_sasl_spnego_bind(211) got [EMAIL PROTECTED] [2004/07/20 20:08:31, 1] libsmb/clikrb5.c:ads_krb5_mk_req(306) krb5_cc_get_principal failed (No such file or directory) [2004/07/20 20:08:31, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(245) Ticket in ccache[MEMORY:winbind_ccache] expiration Wed, 21 Jul 2004 06:08:52 GMT [2004/07/20 20:08:31, 3] libads/ldap.c:ads_workgroup_name(2124) Found alternate name 'HOME' for realm 'HOME.LOCAL' [2004/07/20 20:08:31, 5] nsswitch/winbindd_util.c:add_trusted_domains(207) scanning trusted domain list [2004/07/20 20:08:31, 3] nsswitch/winbindd_ads.c:trusted_domains(832) ads: trusted_domains [2004/07/20 20:08:31, 3] libads/ldap.c:ads_connect(218) Connected to LDAP server 10.0.0.100 [2004/07/20 20:08:31, 3] libads/ldap.c:ads_server_info(2029) got ldap server name [EMAIL PROTECTED], using bind path: dc=HOME,dc=LOCAL [2004/07/20 20:08:31, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(110) IPC$ connections done anonymously [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_start_connection(1373) Connecting to host=FROSTY [2004/07/20 20:08:31, 3] lib/util_sock.c:open_socket_out(735) Connecting to 10.0.0.100 at port 445 [2004/07/20 20:08:31, 5] nsswitch/winbindd_cm.c:cm_open_connection(256) connecting to FROSTY from KARA with kerberos principal [EMAIL PROTECTED] [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(705) Doing spnego session setup (blob length=106) [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 2 840 48018 1 2 2 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 2 840 113554 1 2 2 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 2 840 113554 1 2 2 3 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 3 6 1 4 1 311 2 2 10 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(737) got [EMAIL PROTECTED] [2004/07/20 20:08:31, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(535) Doing kerberos session setup [2004/07/20 20:08:31, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(245) Ticket in ccache[MEMORY:cliconnect] expiration Wed, 21 Jul 2004 06:08:31 GMT [2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173) add_trusted_domain: BUILTIN is an NT4 domain [2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180) Added domain BUILTIN S-1-5-32 [2004/07/20 20:08:31, 3] nsswitch/winbindd_util.c:add_trusted_domain(173) add_trusted_domain: KARA is an NT4 domain [2004/07/20 20:08:31, 1] nsswitch/winbindd_util.c:add_trusted_domain(180) Added domain KARA S-1-5-21-3424855220-147354258-856157331 [2004/07/20 20:08:31, 5] nsswitch/winbindd_util.c:add_trusted_domains(207) scanning trusted domain list [2004/07/20 20:08:31, 3] nsswitch/winbindd_ads.c:trusted_domains(832) ads: trusted_domains [2004/07/20 20:08:31, 3] libads/ldap.c:ads_connect(218) Connected to LDAP server 10.0.0.100 [2004/07/20 20:08:31, 3] libads/ldap.c:ads_server_info(2029) got ldap server name [EMAIL PROTECTED], using bind path: dc=HOME,dc=LOCAL [2004/07/20 20:08:31, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(110) IPC$ connections done anonymously [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_start_connection(1373) Connecting to host=FROSTY [2004/07/20 20:08:31, 3] lib/util_sock.c:open_socket_out(735) Connecting to 10.0.0.100 at port 445 [2004/07/20 20:08:31, 5] nsswitch/winbindd_cm.c:cm_open_connection(256) connecting to FROSTY from KARA with kerberos principal [EMAIL PROTECTED] [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(705) Doing spnego session setup (blob length=106) [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 2 840 48018 1 2 2 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 2 840 113554 1 2 2 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 2 840 113554 1 2 2 3 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(730) got OID=1 3 6 1 4 1 311 2 2 10 [2004/07/20 20:08:31, 3] libsmb/cliconnect.c:cli_session_setup_spnego(737) got [EMAIL PROTECTED] [2004/07/20 20:08:31, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(535) Doing kerberos session setup [2004/07/20 20:08:31, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(245) Ticket in ccache[MEMORY:cliconnect] expiration Wed, 21 Jul 2004 06:08:31 GMT -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
