Alexander Menk
2007-02-27 04:30:45 UTC
Hello!
I've integrated samba into an existing NT Domain managed by a windows
2003 server. Recently I'm have trouble to use the "groups" command get
the group of domain users. It worked well for weeks (but perhaps after
setting up an ldap-connection to the same server via the apache2 module
auth_ldap), there are irregular connection-losses, so winbind seems not
to be able to retrieve the groupnames. Sure, there are some possible
workarounds, but it would be nice to have a stable connection to the DC.
Perhaps there is any nice way to auto-resume that winbind-lookup-connection?
## I try to get the group-membership of username:
$ groups DOMAIN-NAME\\username
id: cannot find name for group ID 16777235
## sometimes a second try work's .. but now it doesn't seem to help...
$ groups DOMAIN-NAME\\username
id: cannot find name for group ID 16777235
## log:
$ tail /var/log/samba/log.wb-DOMAIN-NAME
[2007/02/26 22:21:14, 0] lib/util_sock.c:write_data(559)
write_data: write failure. Error = Connection reset by peer
[2007/02/26 22:21:14, 0] libsmb/clientgen.c:write_socket(138)
write_socket: Error writing 190 bytes to socket 3: ERRNO = Connection
reset by peer
[2007/02/26 22:21:14, 0] libsmb/clientgen.c:cli_send_smb(168)
Error writing 190 bytes to client. -1 (Connection reset by peer)
[2007/02/26 22:21:14, 0] rpc_client/cli_pipe.c:rpc_api_pipe(790)
rpc_api_pipe: Remote machine SERVER01 pipe \NETLOGON fnum
0xc00creturned critical error. Error was Write error: Connection reset
by peer
## only after restarting winbind it works:
***@server03:/var/log/samba$ sudo /etc/init.d/winbind restart
* Restarting the Winbind daemon winbind
[ ok ]
$ groups DOMAIN-NAME\\username
DOMAIN-NAME\\username : DOMAIN-NAME\dom?nen-benutzer ntadmin
DOMAIN-NAME\technik
## log for the case it worked
$ tail /var/log/samba/log.wb-DOMAIN-NAME
[2007/02/26 22:26:14, 0] libsmb/clientgen.c:cli_rpc_pipe_close(375)
cli_rpc_pipe_close: cli_close failed on pipe \NETLOGON, fnum 0xc00c to
machine SERVER01. Error was Write error: Connection reset by peer
[2007/02/26 22:26:14, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(533)
Doing kerberos session setup
[2007/02/26 22:29:55, 0] nsswitch/winbindd_dual.c:child_read_request(49)
Got invalid request length: 0
[2007/02/26 22:29:57, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(533)
Doing kerberos session setup
Any Ideas?
TIA!
I've integrated samba into an existing NT Domain managed by a windows
2003 server. Recently I'm have trouble to use the "groups" command get
the group of domain users. It worked well for weeks (but perhaps after
setting up an ldap-connection to the same server via the apache2 module
auth_ldap), there are irregular connection-losses, so winbind seems not
to be able to retrieve the groupnames. Sure, there are some possible
workarounds, but it would be nice to have a stable connection to the DC.
Perhaps there is any nice way to auto-resume that winbind-lookup-connection?
## I try to get the group-membership of username:
$ groups DOMAIN-NAME\\username
id: cannot find name for group ID 16777235
## sometimes a second try work's .. but now it doesn't seem to help...
$ groups DOMAIN-NAME\\username
id: cannot find name for group ID 16777235
## log:
$ tail /var/log/samba/log.wb-DOMAIN-NAME
[2007/02/26 22:21:14, 0] lib/util_sock.c:write_data(559)
write_data: write failure. Error = Connection reset by peer
[2007/02/26 22:21:14, 0] libsmb/clientgen.c:write_socket(138)
write_socket: Error writing 190 bytes to socket 3: ERRNO = Connection
reset by peer
[2007/02/26 22:21:14, 0] libsmb/clientgen.c:cli_send_smb(168)
Error writing 190 bytes to client. -1 (Connection reset by peer)
[2007/02/26 22:21:14, 0] rpc_client/cli_pipe.c:rpc_api_pipe(790)
rpc_api_pipe: Remote machine SERVER01 pipe \NETLOGON fnum
0xc00creturned critical error. Error was Write error: Connection reset
by peer
## only after restarting winbind it works:
***@server03:/var/log/samba$ sudo /etc/init.d/winbind restart
* Restarting the Winbind daemon winbind
[ ok ]
$ groups DOMAIN-NAME\\username
DOMAIN-NAME\\username : DOMAIN-NAME\dom?nen-benutzer ntadmin
DOMAIN-NAME\technik
## log for the case it worked
$ tail /var/log/samba/log.wb-DOMAIN-NAME
[2007/02/26 22:26:14, 0] libsmb/clientgen.c:cli_rpc_pipe_close(375)
cli_rpc_pipe_close: cli_close failed on pipe \NETLOGON, fnum 0xc00c to
machine SERVER01. Error was Write error: Connection reset by peer
[2007/02/26 22:26:14, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(533)
Doing kerberos session setup
[2007/02/26 22:29:55, 0] nsswitch/winbindd_dual.c:child_read_request(49)
Got invalid request length: 0
[2007/02/26 22:29:57, 2] libsmb/cliconnect.c:cli_session_setup_kerberos(533)
Doing kerberos session setup
Any Ideas?
TIA!
--
Alexander Menk
Alexander Menk