форумы  помощь  поиск  регистрация  майллист  вход/выход  слежка

Вариант для распечатки		Пред. тема | След. тема
Форумы Samba, вопросы интеграции Unix и Windows (Public)
Изначальное сообщение		[ Отслеживать ]

"winbindd - глюки с авторизацией"

Сообщение от GByte (??) on 05-Дек-08, 12:14

Приветствую! Давно (несколько месяцев назад) настроил авторизацию на своей машине (Ubuntu 7.10) в AD. Три дня назад вдруг прекратилась авторизация. wbinfo -u выводит список пользователей домена. getent passwd - только локальных пользователей. Подскажите куда копать? [/etc/nsswitch.conf] passwd:         files winbind group:          files winbind shadow:         files winbind hosts:          files dns #mdns4_minimal [NOTFOUND=return] dns mdns4 networks:       files netgroup:       files winbind protocols:      files winbind services:       files winbind ethers:         db files rpc:            db files [/var/log/auth.log] gdm[5643]: pam_winbind(gdm:auth): [pamh: 0x080cc578] ENTER: pam_sm_authenticate (flags: 0x0000) gdm[5643]: pam_winbind(gdm:auth): getting password (0x00000001) gdm[5643]: pam_winbind(gdm:auth): Verify user 'DOMAIN/user' gdm[5643]: pam_winbind(gdm:auth): user 'DOMAIN/user' granted access gdm[5643]: pam_winbind(gdm:auth): Returned user was 'user' gdm[5643]: pam_winbind(gdm:auth): [pamh: 0x080cc578] LEAVE: pam_sm_authenticate returning 0 gdm[5643]: pam_winbind(gdm:account): [pamh: 0x080cc578] ENTER: pam_sm_acct_mgmt (flags: 0x0000) gdm[5643]: pam_winbind(gdm:account): user 'user' not found gdm[5643]: pam_winbind(gdm:account): [pamh: 0x080cc578] LEAVE: pam_sm_acct_mgmt returning 10 gdm[5643]: pam_unix(gdm:account): could not identify user (from getpwnam(user)) gdm[5643]: pam_winbind(gdm:auth): [pamh: 0x080cdc70] ENTER: pam_sm_authenticate (flags: 0x0000) gdm[5643]: pam_winbind(gdm:auth): getting password (0x00000001) gdm[5643]: pam_winbind(gdm:auth): Verify user 'DOMAIN/user1' gdm[5643]: pam_winbind(gdm:auth): user 'DOMAIN/user1' granted access gdm[5643]: pam_winbind(gdm:auth): Returned user was 'user1' gdm[5643]: pam_winbind(gdm:auth): [pamh: 0x080cdc70] LEAVE: pam_sm_authenticate returning 0 gdm[5643]: pam_winbind(gdm:account): [pamh: 0x080cdc70] ENTER: pam_sm_acct_mgmt (flags: 0x0000) gdm[5643]: pam_winbind(gdm:account): user 'user1' not found gdm[5643]: pam_winbind(gdm:account): [pamh: 0x080cdc70] LEAVE: pam_sm_acct_mgmt returning 10 gdm[5643]: pam_unix(gdm:account): could not identify user (from getpwnam(user1)) [/etc/pam.d/common-auth] auth    required        pam_env.so auth    sufficient      pam_winbind.so debug auth    sufficient      pam_unix.so likeauth nullok use_first_pass auth    required        pam_deny.so

Высказать мнение | Ответить | Правка | Cообщить модератору

Сообщения по теме

[Сортировка по времени | RSS]

1. "winbindd - глюки с авторизацией"

Сообщение от GByte (??) on 07-Дек-08, 08:04

Включил --debug 10 для winbindd. после выполнения getent passwd в /var/log/samba/winbind.log пишется: [2008/12/07 09:59:36, 10] nsswitch/winbindd.c:process_request(314)   process_request: request fn PING [2008/12/07 09:59:36, 3] nsswitch/winbindd_misc.c:winbindd_ping(470)   [ 8500]: ping [2008/12/07 09:59:36, 10] nsswitch/winbindd.c:process_request(314)   process_request: request fn SID_TO_GID [2008/12/07 09:59:36, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308)   [ 8500]: sid to gid S-1-5-2 [2008/12/07 09:59:36, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679)   find_lookup_domain_from_sid(S-1-5-2) [2008/12/07 09:59:36, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(689)   calling find_our_domain [2008/12/07 09:59:36, 10] lib/events.c:event_add_timed(129)   Added timed event "async_request_timeout": 82d72f0 [2008/12/07 09:59:36, 10] lib/events.c:get_timed_events_timeout(295)   timed_events_timeout: 299/999975 [2008/12/07 09:59:36, 10] lib/events.c:timed_event_destructor(66)   Destroying timed event 82d72f0 "async_request_timeout" [2008/12/07 09:59:36, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300)   Retrieving response for pid 8483 [2008/12/07 09:59:36, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545)   winbindd_sid2gid_async: Resolving S-1-5-2 to a gid [2008/12/07 09:59:36, 10] lib/events.c:event_add_timed(129)   Added timed event "async_request_timeout": 82d72f0 [2008/12/07 09:59:36, 10] lib/events.c:get_timed_events_timeout(295)   timed_events_timeout: 299/999982 [2008/12/07 09:59:36, 10] lib/events.c:timed_event_destructor(66)   Destroying timed event 82d72f0 "async_request_timeout" [2008/12/07 09:59:36, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300)   Retrieving response for pid 8503 [2008/12/07 09:59:36, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527)   sid2gid returned an error [2008/12/07 09:59:36, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254)   Could not convert sid S-1-5-2 [2008/12/07 09:59:36, 10] nsswitch/winbindd.c:process_request(314)   process_request: request fn PING [2008/12/07 09:59:36, 3] nsswitch/winbindd_misc.c:winbindd_ping(470)   [ 8500]: ping [2008/12/07 09:59:36, 10] nsswitch/winbindd.c:process_request(314)   process_request: request fn SID_TO_GID [2008/12/07 09:59:36, 3] nsswitch/winbindd_sid.c:winbindd_sid_to_gid(308)   [ 8500]: sid to gid S-1-5-32-546 [2008/12/07 09:59:36, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(679)   find_lookup_domain_from_sid(S-1-5-32-546) [2008/12/07 09:59:36, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(682)   calling find_domain_from_sid [2008/12/07 09:59:36, 10] lib/events.c:event_add_timed(129)   Added timed event "async_request_timeout": 82d72f0 [2008/12/07 09:59:36, 10] lib/events.c:get_timed_events_timeout(295)   timed_events_timeout: 299/999963 [2008/12/07 09:59:36, 10] lib/events.c:timed_event_destructor(66)   Destroying timed event 82d72f0 "async_request_timeout" [2008/12/07 09:59:36, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300)   Retrieving response for pid 8505 [2008/12/07 09:59:36, 7] nsswitch/winbindd_async.c:winbindd_sid2gid_async(545)   winbindd_sid2gid_async: Resolving S-1-5-32-546 to a gid [2008/12/07 09:59:36, 10] lib/events.c:event_add_timed(129)   Added timed event "async_request_timeout": 82d72f0 [2008/12/07 09:59:36, 10] lib/events.c:get_timed_events_timeout(295)   timed_events_timeout: 299/999962 [2008/12/07 09:59:36, 10] lib/events.c:timed_event_destructor(66)   Destroying timed event 82d72f0 "async_request_timeout" [2008/12/07 09:59:36, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2300)   Retrieving response for pid 8503 [2008/12/07 09:59:36, 5] nsswitch/winbindd_async.c:winbindd_sid2gid_recv(527)   sid2gid returned an error [2008/12/07 09:59:36, 5] nsswitch/winbindd_sid.c:sid2gid_recv(254)   Could not convert sid S-1-5-32-546 [2008/12/07 09:59:36, 10] nsswitch/winbindd.c:process_request(314)   process_request: request fn PING [2008/12/07 09:59:36, 3] nsswitch/winbindd_misc.c:winbindd_ping(470)   [ 8500]: ping [2008/12/07 09:59:36, 3] printing/printing.c:start_background_queue(1388)   start_background_queue: Starting background LPQ thread [2008/12/07 09:59:36, 2] smbd/server.c:open_sockets_smbd(458)   waiting for a connection [2008/12/07 10:00:09, 6] nsswitch/winbindd.c:new_connection(628)   accepted socket 22 [2008/12/07 10:00:09, 10] nsswitch/winbindd.c:process_request(314)   process_request: request fn INTERFACE_VERSION [2008/12/07 10:00:09, 3] nsswitch/winbindd_misc.c:winbindd_interface_version(491)   [ 8511]: request interface version [2008/12/07 10:00:09, 10] nsswitch/winbindd.c:process_request(314)   process_request: request fn WINBINDD_PRIV_PIPE_DIR [2008/12/07 10:00:09, 3] nsswitch/winbindd_misc.c:winbindd_priv_pipe_dir(524)   [ 8511]: request location of privileged pipe [2008/12/07 10:00:09, 6] nsswitch/winbindd.c:new_connection(628)   accepted socket 27 [2008/12/07 10:00:09, 10] nsswitch/winbindd.c:process_request(314)   process_request: request fn SETPWENT [2008/12/07 10:00:09, 3] nsswitch/winbindd_user.c:winbindd_setpwent_internal(445)   [ 8511]: setpwent [2008/12/07 10:00:09, 10] nsswitch/winbindd.c:process_request(314)   process_request: request fn GETPWENT [2008/12/07 10:00:09, 3] nsswitch/winbindd_user.c:winbindd_getpwent(636)   [ 8511]: getpwent [2008/12/07 10:00:09, 10] nsswitch/winbindd.c:process_request(314)   process_request: request fn ENDPWENT [2008/12/07 10:00:09, 3] nsswitch/winbindd_user.c:winbindd_endpwent(521)   [ 8511]: endpwent

Высказать мнение | Ответить | Правка | Наверх | Cообщить модератору

Архив | Удалить	Индекс форумов | Темы | Пред. тема | След. тема
Оцените тред (1=ужас, 5=супер)? [ 1 | 2 | 3 | 4 | 5 ] [Рекомендовать для помещения в FAQ]