SAMBA, WINBIND and KERBEROS against Windows 2000 Active Directory
 

Hello,

I really hope you can help me with the solution or at least ideas because I ran out.

Here is the scenario:

4 Mandriva servers running samba +kerberos and windbind they all authenticate against a Windows 2000 Active Directory.

All works fine but just a few minutes ago one of them, yes just one, stopped authenticating one user.

I check the AD user settings and they were OK, in fact I tested that specific account on the other servers and they where fine.

Now I stopped the smb service and deleted all the .tdb files, restart smb, restart winbind and still nothing.

After struggling with it I decided to reboot it, and if got fixed but the whole point is that is an extremly odd behaviour and I really want to know what might cause it.
2 of the servers are on a hosting facility for backup and if one of those ever have the same problem will be a 2 hour drive to reboot the darn thing.

Thanks a lot.

COMPLETE GUESS !!

If your asking why this 1 user was having issues, my guess would be that the user's kerberos ticket expired or was rejected for some reason. Rebooting the server probably didn't fix it, the client renewed the krb ticket on its own since the ticket was lost/expired/rejected. Without examining logs on both sides, the only thing I can do is speculate.

You could set "syslog = 4" in your /etc/samba/smb.conf file and then restart samba.

Is there anything interesting in the most recent /var/log/samba/*.log files or /var/log/syslog?