I allways use 'net rpc join' - allways with 'rpc' option. I did not run 'net join' when machine is working normally. By mistake I included content of smb.conf that was made for testing. "Production" smb.conf has workgroup = METAL, other setting are same.

Felipe Augusto van de Wiel pravi:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/11/2006 11:50 AM, Urik escreveu:
Hello,
that is my first posting and I hope I provided enough details.

        I thought that was your second post. :-)


1) system: (SLES 9) Linux mp1 2.6.5-7.193-s390x #1 SMP Wed Jul 20
14:39:18 UTC 2005 s390x s390x s390x GNU/Linux

2) samba version:

samba-doc-3.0.20b-3.4
samba-client-3.0.20b-3.4
samba-winbind-3.0.20b-3.4
samba-3.0.20b-3.4

3) smb.conf:

# Samba config file created using SWAT
# from 172.16.8.1 (172.16.8.1)
# Date: 2006/08/27 11:38:37

[global]
       workgroup = WGRP
       security = DOMAIN
       map to guest = Bad User
       username map = /etc/samba/smbusers
       socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
SO_SNDBUF=14596 SO_RCVBUF=14596
       logon path = \\%L\profiles\.msprofile
       logon drive = P:
       logon home = \\%L\%U\.9xprofile
       domain master = No
       wins server = 172.16.2.100
       ldap idmap suffix = ou=Idmap
       ldap machine suffix = ou=Computers
       ldap suffix = dc=example,dc=com
       ldap ssl = no
       idmap uid = 10000-20000
       idmap gid = 10000-20000
       winbind use default domain = Yes
       printer admin = @ntadmin, root, administrator
       cups options = raw
[...]

        Did you join the machine to the domain?

        I saw that you always do a 'net rpc join' when you have problems,
but did you actually just run a 'net join' before, when the machine is
working under normal circunstances?


4) log.wb-WGRP from last power failure and increased debug level

[2006/08/26 16:42:31, 3] lib/util.c:fcntl_lock(1826)
 fcntl_lock: fcntl lock gave errno 11 (Resource temporarily unavailable)
[2006/08/26 16:42:31, 3] lib/util.c:fcntl_lock(1845)
 fcntl_lock: lock failed at offset 0 count 1 op 6 type 0 (Resource
temporarily unavailable)
[2006/08/26 16:42:31, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(105)
 cm_get_ipc_userpass: No auth-user defined
[2006/08/26 16:42:31, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
 lsa_io_sec_qos: length c does not match size 8
[2006/08/26 16:42:31, 3]
nsswitch/winbindd_misc.c:winbindd_dual_list_trusted_domains(124)
 [ 1889]: list trusted domains
[2006/08/26 16:42:31, 3] nsswitch/winbindd_rpc.c:trusted_domains(837)
 rpc: trusted_domains
[2006/08/26 16:42:31, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
 lsa_io_sec_qos: length c does not match size 8
[2006/08/26 16:43:51, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
 [ 1889]: pam auth crap domain: METAL user: user1

        That's strange. You smb.conf says 'workgroup = WGRP' but
your logs says 'domain: METAL'. Are you sure on that one?


[2006/08/26 16:43:51, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
 could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:51, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
 NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
 [ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
 could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:57, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
 NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
 [ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:57, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
 could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:57, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
 NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
[2006/08/26 16:43:58, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(607)
 [ 1889]: pam auth crap domain: METAL user: user1
[2006/08/26 16:43:58, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(667)
 could not open handle to NETLOGON pipe (error: NT_STATUS_ACCESS_DENIED)
[2006/08/26 16:43:58, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth_crap(801)
 NTLM CRAP authentication for user [METAL]\[user1] returned
NT_STATUS_ACCESS_DENIED (PAM: 4)
.....

Last four lines are repeated several 100 times for different users
trying to access samba share.

Thank you all for your help.

Urik

        I hope this helps.

        Kind regards,

- --
Felipe Augusto van de Wiel <[EMAIL PROTECTED]>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFCAcdCj65ZxU4gPQRAsoOAJ4/B528xAcOH5dbEyjTKEbYsvmiUwCgkGiZ
vfpO9KRstDySe6btBF0mbhY=
=9IXw
-----END PGP SIGNATURE-----

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to