Hello,
that is my first posting and I hope I provided enough details.
1) system: (SLES 9) Linux mp1 2.6.5-7.193-s390x #1 SMP Wed Jul 20
14:39:18 UTC 2005 s390x s390x s390x GNU/Linux
2) samba version:
samba-doc-3.0.20b-3.4
samba-client-3.0.20b-3.4
samba-winbind-3.0.20b-3.4
samba-3.0.20b-3.4
3) smb.conf:
# Samba config file created using SWAT
# from 172.16.8.1 (172.16.8.1)
# Date: 2006/08/27 11:38:37
[global]
workgroup = WGRP
security = DOMAIN
map to guest = Bad User
username map = /etc/samba/smbusers
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
SO_SNDBUF=14596 SO_RCVBUF=14596
logon path = \\%L\profiles\.msprofile
logon drive = P:
logon home = \\%L\%U\.9xprofile
domain master = No
wins server = 172.16.2.100
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
ldap suffix = dc=example,dc=com
ldap ssl = no
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind use default domain = Yes
printer admin = @ntadmin, root, administrator
cups options = raw
[homes]
comment = Home Directories
valid users = %S
read only = No
inherit permissions = Yes
browseable = No
[profiles]
comment = Network Profiles Service
path = %H
read only = No
create mask = 0600
directory mask = 0700
store dos attributes = Yes
browseable = No
available = No
[users]
comment = All users
path = /home
read only = No
inherit permissions = Yes
veto files = /aquota.user/groups/shares/
browseable = No
available = No
[groups]
comment = All groups
path = /home/groups
read only = No
inherit permissions = Yes
browseable = No
available = No
[pdf]
comment = PDF creator
path = /var/tmp
create mask = 0600
printable = Yes
[printers]
comment = All Printers
path = /var/tmp
create mask = 0600
printable = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin, root
force group = ntadmin
create mask = 0664
directory mask = 0775
[vala]
path = /home/visioa/vala
[kova]
path = /home/visioa/kova
4) log.wb-WGRP from last power failure and increased debug level
[2006/08/26 16:42:31, 3] lib/util.c:fcntl_lock(1826)
fcntl_lock: fcntl lock gave errno 11 (Resource temporarily unavailable)
[2006/08/26 16:42:31, 3] lib/util.c:fcntl_lock(1845)
fcntl_lock: lock failed at offset 0 count 1 op 6 type 0 (Resource
temporarily unavailable)
[2006/08/26 16:42:31, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(105)
cm_get_ipc_userpass: No auth-user defined
[2006/08/26 16:42:31, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
lsa_io_sec_qos: length c does not match size 8
[2006/08/26 16:42:31, 3]
nsswitch/winbindd_misc.c:winbindd_dual_list_trusted_domains(124)
[ 1889]: list trusted domains
[2006/08/26 16:42:31, 3] nsswitch/winbindd_rpc.c:trusted_domains(837)
rpc: trusted_domains
[2006/08/26 16:42:31, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
lsa_io_sec_qos: length c does not match size 8
[2006/08/26 16:43:51, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
[ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:51, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:51, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
[ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:57, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
[ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:57, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
[2006/08/26 16:43:58, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
[ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:58, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:58, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
.....
Last four lines are repeated several 100 times for different users
trying to access samba share.
Thank you all for your help.
Urik
Felipe Augusto van de Wiel pravi:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 09/07/2006 02:26 PM, Urik escreveu:
I noticed that wbinfo -t returns error and windows clients can not
access samba share when samba server is restarted (power failure) and
windows 2000 domain server keeps running; wbinfo -u and wbinfo -g return
expected results; after net rpc join -U is issued everything works as
expected;
Is there any way to avoid such behaviour?
How is your samba server configured? It is just a member
server? Can you send us your smb.conf?
Please run testparm and increase the loglevel (debuglevel)
values when running these commands and send also the relevant part
of the logs.
Urik
Just for the record, you samba server should be joined to
the domain and "re-join" it every time you reboot the machine
should not be necessary, which means, something is wrong. :)
Kind regards,
- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/ Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org
iD8DBQFFBWPICj65ZxU4gPQRAhNRAJ9gqosahZsjwjqyerQ3oC3IWQY2dgCgph0s
JxbrMah3MhuJ9BiarT1dR74=
=KB+/
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
