Michael Wray wrote:
Problem: wbinfo -t fails. As long as it fails, I am unable to map sids to Group Names. I need this functionality for my application. I can use just about everyother function of wbinfo at least partially...Hard to believe MIT & Heimdal can coexist in the standard library paths. Anyone else ever done this?
Distro: Debian woody.
Packages:
ii samba 3.0.11-0woody1 a LanManager-like file and printer server fo
ii samba-common 3.0.11-0woody1 Samba common files used by both the server a
ii samba-doc 3.0.11-0woody1 Samba documentation
ii libpam-smbpass 3.0.11-0woody1 pluggable authentication module for SMB pass
ii libsmbclient 3.0.11-0woody1 shared library that allows applications to t
ii smbclient 3.0.11-0woody1 a LanManager-like simple client for Unix
ii winbind 3.0.11-0woody1 service to resolve user and group informatio
ii krb5-config 1.4 Configuration files for Kerberos Version 5
ii krb5-doc 1.2.4-5woody8 Documentation for krb5
ii libkrb-1-kerbe 1.2.2-8.dirk.1 Kerberos Libraries for Kerberos4 From KTH
ii libkrb5-17-hei 0.6.3-0.dirk.1 Libraries for Heimdal Kerberos
ii libkrb53 1.2.4-5woody8 MIT Kerberos runtime libraries
ii heimdal-client 0.6.3-0.dirk.1 Clients for Heimdal Kerberos
ii heimdal-kdc 0.6.3-0.dirk.1 KDC for Heimdal Kerberos
rc heimdal-server 0.6.3-0.dirk.1 Servers for Heimdal Kerberos
rc heimdal-server 0.6.3-0.dirk.1 X11 files for Heimdal Kerberos
Anyway, looks like libkrb53 is version 1.2.4. I never got it to work reliably, across the boards, with less than MIT krb5 V1.3.
When I googled "BAD SIG" I got this from samba lists http://lists.samba.org/archive/samba/2005-January/098500.html
Caveat, I'm stuck with using "stable" backports for samba...due to the development environment I'm in..policy dictates I wait for the package to be backported before I can upgrade to it.
log.winbindd,log.nmbd, and log.samba only show the services starting and stopping. If the answer is upgrading to yet a newer version of samba..then great..the solution will have to wait. Problem started out w/ version 3.0.7, and hasn't been working since..even with subsequent upgrades. Note: now I am on 3.0.11 (got that about the time everyone started talking about 3.0.14.)
Here is the error from my log.%m (Of and relating to winbindd)
test:/var/log/samba# tail -f log.ntlm
[2005/04/25 14:38:40, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(261)
[26801]: request interface version
[2005/04/25 14:38:40, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(297)
[26801]: request location of privileged pipe
[2005/04/25 14:38:40, 3] nsswitch/winbindd_misc.c:winbindd_check_machine_acct(41)
[26801]: check machine account
[2005/04/25 14:38:40, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(109)
IPC$ connections done anonymously
[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(708)
Doing spnego session setup (blob length=113)
[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(733)
got OID=1 2 840 48018 1 2 2
[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(733)
got OID=1 2 840 113554 1 2 2
[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(733)
got OID=1 2 840 113554 1 2 2 3
[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(733)
got OID=1 3 6 1 4 1 311 2 2 10
[2005/04/25 14:38:40, 3] libsmb/cliconnect.c:cli_session_setup_spnego(740)
got [EMAIL PROTECTED]
[2005/04/25 14:38:40, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(533)
Doing kerberos session setup
[2005/04/25 14:38:40, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(318)
Ticket in ccache[MEMORY:cliconnect] expiration Tue, 26 Apr 2005 00:38:40 GMT
[2005/04/25 14:38:40, 0] libsmb/smb_signing.c:signing_good(240)
signing_good: BAD SIG: seq 1
Regards, Doug
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
