[Pkg-samba-maint] Bug#484309: interdomain trusting fails

Peter Slickers pesli at web.de
Tue Jun 3 16:08:58 UTC 2008


Package: samba
Version: 3.0.30-2

After upgrading all samba-packages from 3.0.28a-3 to 3.0.30-2, trusted accounts
are no longer recognized, and the command 'wbinfo -t' fails. After downgrading
to 3.0.28a-3, everything works fine again.

I'm running a PDC which is trusting another domain which is run by a
Windows-NT4-SP6 domain controller. Users of the NT4 domain can login
to the samba domain. This works fine with samba 3.0.28a-3. After upgrading
to 3.0.30-2, it is no longer possible for the NT4-domain users to
login to the samba domain. In addition, the command 'wbinfo -t' fails
on the samba server.

wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND (0xc0000233)
Could not check secret

I have also traced the output of winbindd in interactive mode
generated after firing up the 'wbinfo -t' command:

/usr/sbin/winbindd -n -i -d10

accepted socket 16
process_request: request fn INTERFACE_VERSION
[ 6770]: request interface version
process_request: request fn WINBINDD_PRIV_PIPE_DIR
[ 6770]: request location of privileged pipe
accepted socket 17
process_request: request fn CHECK_MACHACC
[ 6770]: check machine account
Added timed event "async_request_timeout": 82e7808
timed_events_timeout: 299/999969
child daemon request 33
process_request: request fn CHECK_MACHACC
[ 6768]: check machine account
could not open handle to NETLOGON pipe
Checking the trust account password returned NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND
Storing response for pid 6769, len 3240
Destroying timed event 82e7808 "async_request_timeout"
Retrieving response for pid 6769



After downgrading to 3.0.28a-3, wbinfo runs successfully:

wbinfo -t
checking the trust secret via RPC calls succeeded
-- 

Peter Slickers





More information about the Pkg-samba-maint mailing list