Samba/winbind on HPUX11

[Jorgen Lassen]

Hi,

I have a problem with getting winbind to work on my domain. I have installed ver 2.2.5 with winbind as a depot file, and that went ok. I have set up samba, and testparm finds no errors. I have joined the domain, again, no problem !
Now here's the thing:

I cant use wbinfo:

# ./wbinfo -u
Error looking up domain users
# ./wbinfo -t
Could not check secret
# ./wbinfo -g
Error looking up domain groups
# ./wbinfo -m
Could not list trusted domain

If i do a ./winbindd -i -d 1 i get this:

Added domain FP02 (S-1-5-21-12331394-1185628507-9522986)
[2002/08/14 14:22:30, 1] nsswitch/winbindd_util.c:(164)
Added domain IN01 (S-1-5-21-2108509408-25497423-532618811)
[2002/08/14 14:22:31, 1] nsswitch/winbindd_util.c:(164)
Added domain IN02 (S-1-5-21-2146598497-1751611310-645736813)
[2002/08/14 14:22:31, 0] lib/util_sock.c:(772)
open_socket_in(): socket() call failed: Too many open files
[2002/08/14 14:22:31, 0] lib/util_sock.c:(772)
open_socket_in(): socket() call failed: Too many open files
[2002/08/14 14:22:31, 0] lib/util_sock.c:(772)
open_socket_in(): socket() call failed: Too many open files
[2002/08/14 14:22:31, 0] lib/util_sock.c:(772)
open_socket_in(): socket() call failed: Too many open files
[2002/08/14 14:22:31, 1] nsswitch/winbindd_util.c:(164)
Added domain BRAPT98 (S-1-5-21-654460698-771908679-1844936127)
[2002/08/14 14:22:31, 0] lib/util_sock.c:(772)
open_socket_in(): socket() call failed: Too many open files
[2002/08/14 14:22:32, 0] lib/util_sock.c:(772)
open_socket_in(): socket() call failed: Too many open files
[2002/08/14 14:22:32, 0] lib/util_sock.c:(772)
open_socket_in(): socket() call failed: Too many open files
[2002/08/14 14:22:32, 0] lib/util_sock.c:(772)
open_socket_in(): socket() call failed: Too many open files

and so on......

my smb.conf:

# Global parameters
[global]
workgroup = XXXXXX
security = DOMAIN
encrypt passwords = Yes
password server = *
preferred master = False
local master = No
domain master = False
wins server = x.x.x.x
socket options = TCP_NODELAY
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind enum users = yes
winbind enum groups = yes
template shell = /bin/false

[test]
comment = Samba ver. 2.2.5
path = /samba
read only = No

Does anyon have an idea what is wrong ?

btw. my nsswicht.conf:

passwd: files winbind
group: files winbind
hosts: dns [NOTFOUND=return] files
services: files
networks: files
protocols: files
rpc: files
publickey: files
netgroup: files
automount: files
aliases: files


Hope someone can help please !!
thanks...

[Chris De Angelis]

I don't know winbind at all, but judging by the "too many open files" error messages, maybe you are running out of file descriptors in the shell environment that's running winbind. You can check this limit with "ulimit -n" in the /usr/bin/sh shell (ulimit -a lists all limits). You can try increasing that to some higher number and try again; see the sh-posix man page for details.

But again, I don't know winbind, so I'm not really sure if this helps. Good luck.

- Chris

[Tym Gilbert]

I've recently set this up on HPUX-11, last week as a matter of fact. My installation required me to be able to authenticate across multiple NT domains that had trusts already established. I joined the domain in my location via the smbpasswd command and then specified which DCs I want winbind to pass authentication off to.

You might try this config if you have not done so already. PDC1 and BDC1 are in my location while PDC2 and BDC2 are in another domain that I trust.

Here's my smb.conf;

[global]
workgroup = (upper case)
log file = /var/adm/smb/log.%m
max log size = 50
security = domain
socket options = TCP_NODELAY
dns proxy = no
password server = PDC1 BDC1 PDC2 BDC2
encrypt passwords = Yes
winbind uid = 10000-65000
winbind gid = 10000-65000
winbind separator = +

The only diffs between your nsswitch.conf and mine is that I'm using NIS, so mine reads nis winbind files.

This config is working for me although I do get some pam related errors that I am troubeshooting now.

I know it doesn't seem like much, but I hope it helps.

Tym Gilbert

[Jorgen Lassen]

Hi Tym,

Sorry but your suggestions didn't work.

Do you think that it is because I have over 140 domains in my company ? Maybe Samba/Winbind don't cope with that many domains.

I can't seem to find any infomation on this matter anyware, do you have any good suggestions?. I mean if you have set up your network like this a week ago, surely you must have some docu on this.

Thanks for your help - It's appreciated !

J??rgen Lassen