With Samba 3.0.28 winbind doesn't work any more (can't log in as user of trusted domains). This should be fixed in 3.0.28a as mentioned in it's release notes. Haven't seen 3.0.28a in portage so far. Would it be possible to add 3.0.28a to portage? Thanks. Reproducible: Always Steps to Reproduce: Having a trusted domain, try to login into the trusting domain as a user of the trusted domain --> fails Actual Results: Errormessage (user and password wrong or stupid message in Windows XP that an device wouldn't function any more) Expected Results: success
So maybe try it? *samba-3.0.28a (10 Mar 2008) 10 Mar 2008; Tiziano Müller <dev-zero@gentoo.org> files/config/system-auth-winbind, +samba-3.0.28a.ebuild: Version bump. Fixed manifest (bug #212774). Fixed system-auth-winbind installation (bug #212387).
Sorry, didn't see the entry because of the delay of the local mirror. Tried Samba 3.0.28a today, did not like it: * wbinfo -u complains that it can't get domain users any more (Samba 3.0.28 at least showed them), maybe it gets confuse, when the trusting party is also a domain controller? * Logging in via the primary domain controller as a user of it on a Windows XP SP2 workstation caused it to complain that it was unable to load the user profile from the server --> immediate rollback to Samba 3.0.28 Winbindd runs on the primary domain controller to which clients are attached. I wanted to log in as a user of a trusted domain, but this doesn't work any more (don't exactly know whether this is a bug of 3.0.28 or not, but as none of the trusted domains work any more (you can mount shares, your password is accepted, but you can't log in), I fear this is a bug of Samba 3.0.28)
Don't know whether this is important or not: tried it on amd64-arch where it doesn't work (In reply to comment #2) > Sorry, didn't see the entry because of the delay of the local mirror. > > Tried Samba 3.0.28a today, did not like it: > * wbinfo -u complains that it can't get domain users any more (Samba 3.0.28 at > least showed them), maybe it gets confuse, when the trusting party is also a > domain controller? > * Logging in via the primary domain controller as a user of it on a Windows XP > SP2 workstation caused it to complain that it was unable to load the user > profile from the server --> immediate rollback to Samba 3.0.28 > > Winbindd runs on the primary domain controller to which clients are attached. I > wanted to log in as a user of a trusted domain, but this doesn't work any more > (don't exactly know whether this is a bug of 3.0.28 or not, but as none of the > trusted domains work any more (you can mount shares, your password is accepted, > but you can't log in), I fear this is a bug of Samba 3.0.28) >
Winbind log errors on the trusting domain Samba 3.0.28 [2008/03/10 16:38:03, 0] libsmb/clientgen.c:cli_receive_smb(112) Receiving SMB: Server stopped responding [2008/03/10 16:38:03, 0] rpc_client/cli_pipe.c:rpc_api_pipe(790) rpc_api_pipe: Remote machine SERVER2 pipe \NETLOGON fnum 0x758creturned critical error. Error was Call returned zero bytes (EOF) Samba 3.0.28a [2008/03/11 07:27:07, 0] libsmb/clientgen.c:cli_receive_smb(112) Receiving SMB: Server stopped responding
Created bug report in samba bugzilla sometime ago, no response yet https://bugzilla.samba.org/show_bug.cgi?id=5339 There I also posted a more precise description and log files. Maybe samba 3.0.27a is also affected, but as it is not in portage the summary line seems to be ok. As winbind doesn't work, interdomain trusts don't work and there are issues with force user=%U option when winbind doesn't work, maybe the bug should be regarded as more severe ...
I think this is fixed in 3.0.29 (not in portage yet) - thought I saw something about it on the Samba mail list.
As stated in the Samba's bugzilla entry, the issue seems to have been fixed in the git sources some time ago, but there hasn't been a stable released version until now. Samba 3.0.29 seems to work fine (at least doesn't have this problem anymore), but I can't find it in the gentoo portage tree :-(, for me it worked in a testing environment to copy the ebuild from Samba 3.0.28a and to rename it and to provide the .tar.gz file manually in the distfiles-folder, but I would like to see it in the portage tree before emerging it on production servers. So please tell me, when the new Samba version will be in portage? (If it is my fault not seeing it due to a out-of-sync mirror, then please forgive me).
Solved with version bump to 3.0.30. Thanks.
