From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Date: Wed, 30 Apr 2003 09:19:42 +0400 From: Grigory Batalov To: sisyphus@altlinux.ru Subject: Re: [sisyphus] wbinfo -g | -u (was: I: new samba3 build) Message-Id: <20030430091942.45add2d9.grisxa@mail.ru> In-Reply-To: <20030429141454.GG18909@sam-solutions.net> References: <20030425164038.GA24972@sam-solutions.net> <20030428170652.1a248491.grisxa@mail.ru> <20030428132431.GC15082@sam-solutions.net> <20030429173824.07ae6c17.grisxa@mail.ru> <20030429141454.GG18909@sam-solutions.net> Organization: OAO "Kovdorsky GOK" X-Mailer: Sylpheed version 0.8.8 (GTK+ 1.2.10; i586-alt-linux-gnu) X-Face: ")Qu!$R3ym>`zI`H#Scijb6gliZ{v(u-Y6muu{*\y^\%Chb}{eEo4=L^jB]/>jhI]yW._DV')>_ Yj#L`{-(%kaIt76Smg&jk>R>@!QO(p{:dr},@; Mime-Version: 1.0 Content-Type: text/plain; charset=KOI8-R Content-Transfer-Encoding: 8bit Sender: sisyphus-admin@altlinux.ru Errors-To: sisyphus-admin@altlinux.ru X-BeenThere: sisyphus@altlinux.ru X-Mailman-Version: 2.0.9 Precedence: bulk Reply-To: sisyphus@altlinux.ru List-Unsubscribe: , List-Id: List-Post: List-Help: List-Subscribe: , List-Archive: Archived-At: List-Archive: On Tue, 29 Apr 2003 17:14:54 +0300 Alexander Bokovoy wrote: > > Мне бы очень пригодился вывод команды wbinfo -u / wbinfo -g, > > но выходит ошибка: > > > > Error looking up domain users > > > > При этом winbindd -i -d3 выдаёт: > > > > bind_rpc_pipe: transfer syntax differs > > rpc_pipe_bind: check_bind_response failed. > > cli_nt_session_open: rpc bind to \PIPE\lsarpc failed > У Вас, похоже, проблемы в другом месте. Опишите Вашу конфигурацию - где > PDC, клиенты и т.д. Домен - UPRAV_NT PDC - Windows NT 4 (4.00.1381) IP: 172.16.0.3, hostname: serv_nt BDC - Windows NT 4 (4.00.1381) IP: 172.16.0.8, hostname: gok Клиент - Samba3-3.0-alt8 IP: 172.16.0.57 hostname: bga Прямой ping по IP и по hostname проходит, другие настройки DNS (DNS-сервер, домен) разные, но они, по-моему, не участвуют. На клиенте '$ testparm' : Load smb config files from /etc/samba/smb.conf Processing section "[homes]" Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters [global] dos charset = CP866 unix charset = KOI8-R display charset = KOI8-R workgroup = UPRAV_NT server string = Samba server on %h (v. %v) security = DOMAIN password server = serv_nt log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = lpstat dns proxy = No wins server = 172.16.0.3 winbind uid = 10000-20000 winbind gid = 10000-20000 winbind use default domain = Yes use sendfile = Yes printing = cups [homes] comment = Home Directory for '%u' read only = No browseable = No На клиенте запускаю winbindd: $ sudo winbindd -i -d3 И там же запрашиваю список групп: $ sudo wbinfo -g Error looking up domain groups Полный вывод winbindd в это время таков: [14485]: request interface version [14485]: request location of privileged pipe [14485]: endpwent [14485]: request interface version [14485]: request location of privileged pipe [14485]: list groups rpc_find_dc: Returning DC SERV_NT (172.16.0.3) for domain UPRAV_NT cm_get_dc_name: Returning DC SERV_NT (172.16.0.3) for domain UPRAV_NT IPC$ connections done anonymously Connecting to host=SERV_NT share=IPC$ Connecting to 172.16.0.3 at port 445 error connecting to 172.16.0.3:445 (Connection refused) Connecting to 172.16.0.3 at port 139 bind_rpc_pipe: transfer syntax differs rpc_pipe_bind: check_bind_response failed. cli_nt_session_open: rpc bind to \PIPE\lsarpc failed add_trusted_domain: UPRAV_NT is a mixed mode domain Added domain UPRAV_NT scanning trusted domain list rpc: trusted_domains IPC$ connections done anonymously Connecting to host=SERV_NT share=IPC$ Connecting to 172.16.0.3 at port 445 error connecting to 172.16.0.3:445 (Connection refused) Connecting to 172.16.0.3 at port 139 IPC$ connections done anonymously Connecting to host=SERV_NT share=IPC$ Connecting to 172.16.0.3 at port 445 error connecting to 172.16.0.3:445 (Connection refused) Connecting to 172.16.0.3 at port 139 rpc: enum_dom_groups get_sam_group_entries: could not enumerate domain groups! Error: NT_STATUS_ACCESS_DENIED -- Григорий Баталов, группа техподдержки ОАО "Ковдорский ГОК"