Winbind issues in Ubuntu 14.04
So no one else wastes a couple of hours of their lives wondering why ntlm_auth is failing due to what appear to be permissions issue. In the version of samba4 installed with Ubuntu 14.04 (4.1.6) the default location of the winbinddd_privileged directory appears to be /var/lib/samba. The upstart script however, still has it in /var/run/samba/ (it may have changed), and does a lovely job of masking the problem by creating the winbindd_privileged directory there on start: pre-start script test -x /usr/sbin/winbindd || exit 0 mkdir -p /var/run/samba/winbindd_privileged chgrp winbindd_priv /var/run/samba/winbindd_privileged chmod 0750 /var/run/samba/winbindd_privileged end script Special shout outs go to the samba project for writing a utility with the most useless debugging output ever: Program returned code (1) and output 'Reading winbind reply failed! (0xc0000001)' (57) mschap : External script failed (57) ERROR: mschap : External script says: Reading winbind reply failed! (0xc0000001) (57) ERROR: mschap : MS-CHAP2-Response is incorrect and whoever decided to disable the init.d script on upstart enabled systems by adding: case "$1" in start) if init_is_upstart; then exit 1 fi Lovely. Bug reported here for winbindd_privileged: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1330220 Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Great catch! Horrible debug... On Sun, Jun 15, 2014 at 12:16 PM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
So no one else wastes a couple of hours of their lives wondering why ntlm_auth is failing due to what appear to be permissions issue.
In the version of samba4 installed with Ubuntu 14.04 (4.1.6) the default location of the winbinddd_privileged directory appears to be /var/lib/samba.
The upstart script however, still has it in /var/run/samba/ (it may have changed), and does a lovely job of masking the problem by creating the winbindd_privileged directory there on start:
pre-start script test -x /usr/sbin/winbindd || exit 0 mkdir -p /var/run/samba/winbindd_privileged chgrp winbindd_priv /var/run/samba/winbindd_privileged chmod 0750 /var/run/samba/winbindd_privileged end script
Special shout outs go to the samba project for writing a utility with the most useless debugging output ever:
Program returned code (1) and output 'Reading winbind reply failed! (0xc0000001)' (57) mschap : External script failed (57) ERROR: mschap : External script says: Reading winbind reply failed! (0xc0000001) (57) ERROR: mschap : MS-CHAP2-Response is incorrect
and whoever decided to disable the init.d script on upstart enabled systems by adding:
case "$1" in start) if init_is_upstart; then exit 1 fi
Lovely.
Bug reported here for winbindd_privileged: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1330220
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Brandon
Brandon Jozsa wrote:
Great catch! Horrible debug...
There's worse... I point to Mailman && Wordpress. I've *never* been able to get mailman to work. I follow the guides, and get 95% there. Then the last bit doesn't work. Why? Mailman won't tell you. It doesn't have reasonable logs, error messages, or *anything* useful. Alan DeKok.
participants (3)
-
Alan DeKok -
Arran Cudbard-Bell -
Brandon Jozsa