I write a new post because the behaviour has changed now... now if I run 
winbind offline the system goes really offline:
root@103note0512:~# smbcontrol winbind offline
root@103note0512:~# smbcontrol winbind onlinestatus
PID 1102: global:Offline BUILTIN:Online 103NOTE0512:Online MYDOMAIN:Offline 

and as expected I can't login via ssh to localhost as domain user. This is what 
I found in auth.log when I try to logon using cached credentials:
Feb 12 15:23:35 103note0512 sshd[4904]: pam_unix(sshd:auth): authentication 
failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=127.0.0.1  
user=MYDOMAIN\myuser
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] ENTER: pam_sm_authenticate (flags: 0x0001)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_SERVICE) = "sshd" (0x563056a9eb30)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_USER) = "MYDOMAIN\myuser" (0x563056a99e20)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_TTY) = "ssh" (0x563056aadf70)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_RHOST) = "127.0.0.1" (0x563056aadf50)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_AUTHTOK) = 0x563056aae320
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_CONV) = 0x563056aae0c0
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): getting 
password (0x00001389)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): pam_get_item 
returned a password
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): Verify user 
'MYDOMAIN\myuser'
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): PAM config: 
krb5_ccache_type 'FILE'
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): enabling krb5 
login flag
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): enabling cached 
login flag
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): enabling 
request for a FILE krb5 ccache
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): request 
wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_SYSTEM_ERR (4), 
NTSTATUS: NT_STATUS_INVALID_PARAMETER, Error message was: An invalid parameter 
was passed to a service or function.
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): internal module 
error (retval = PAM_SYSTEM_ERR(4), user = 'MYDOMAIN\myuser')
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] LEAVE: pam_sm_authenticate returning 4 (PAM_SYSTEM_ERR)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_SERVICE) = "sshd" (0x563056a9eb30)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_USER) = "MYDOMAIN\myuser" (0x563056a99e20)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_TTY) = "ssh" (0x563056aadf70)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_RHOST) = "127.0.0.1" (0x563056aadf50)
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_AUTHTOK) = 0x563056aae320
Feb 12 15:23:35 103note0512 sshd[4904]: pam_winbind(sshd:auth): [pamh: 
0x563056aa04e0] STATE: ITEM(PAM_CONV) = 0x563056aae0c0
Feb 12 15:23:37 103note0512 sshd[4904]: Failed password for MYDOMAIN\\myuser 
from 127.0.0.1 port 35936 ssh2

...even if debug logs are very similar.

Piviul

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1815019

Title:
  offline logon doesnt works in ubuntu 18.04

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1815019/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to