Hi John, the same thing happend to me with the groups. net rpc groups or wbinfo -g dosen't work anymore. In the PDC and in the domain member machines.
I really don't know what to do anymore... the ntlm authentication stop working... And I try like you newer versions and the same problem. Only if I downgrade to 3.0.14 ( ex stable ) the things works OK. I try to delete all the tdb and rejoin to the domain or a new workstation and same problem. Any help would be great. Bye. Carsten John wrote: > Hello everybody, > > > we were running into trouble after upgrading our samba PDC to a new > hardware (and a new debian release). > > Before the upgrade we used 3.0.22 on a debian sarge machine without > problems. > > Moving the installation to a new machine with debian etch (amd64, samba > 3.0.24-6etch4) worked good at the first look. > > A closer look shows the following problems: > > - a domain member server (samba 3.0.22) can't be accessed any more. The > samba on the PDC are showing a succeeding auth request for the user, but > the windows box claims access rights problems. This is a minor problem, > as we could temporarily go around that by mounting the necessary > filesystem via NFS to the PDC and exporting them from there. > > - our logon script (which uses ifmember.exe to check the group > membership of the user for printer mapping) does not work any more. > Testing "ifmember.exe /list" directly at the windows command line shows > that group memberships are not reported any more. > > - additionally some users are reporting problems accessing shares with > special access groups (couldn't really verify that so far) > > > Last night I tested the following steps go fix the problem - without > success :-( > > - upgraded to 3.0.25 packages from sernet (same problems) > - compiled and installed 3.0.22 on the machine to downgrade. smbd now > claims unknown version of passdb.tdb. Obviously the 3.0.24 smbd upgraded > the file format, that is now unreadable for the old samba daemon. > > So far we don't have any netgroup mappings on the server, as they didn't > have been necessary in the past. > > Any help would be really appreciated, as I could not play around with > the server so much b'cause it's a highly used production system. > > > > Thanks > > > Carsten > > > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
