Winbind issues in Ubuntu 14.04

[Brandon Jozsa]

Great catch! Horrible debug...


On Sun, Jun 15, 2014 at 12:16 PM, Arran Cudbard-Bell <
a.cudbardb at freeradius.org> wrote:

> So no one else wastes a couple of hours of their lives wondering why
> ntlm_auth is failing due to what appear to be permissions issue.
>
> In the version of samba4 installed with Ubuntu 14.04 (4.1.6) the default
> location of the winbinddd_privileged directory appears to be /var/lib/samba.
>
> The upstart script however, still has it in /var/run/samba/ (it may have
> changed), and does a lovely job of masking the problem by creating the
> winbindd_privileged directory there on start:
>
> pre-start script
>         test -x /usr/sbin/winbindd || exit 0
>         mkdir -p /var/run/samba/winbindd_privileged
>         chgrp winbindd_priv /var/run/samba/winbindd_privileged
>         chmod 0750 /var/run/samba/winbindd_privileged
> end script
>
> Special shout outs go to the samba project for writing a utility with the
> most useless debugging output ever:
>
> Program returned code (1) and output 'Reading winbind reply failed!
> (0xc0000001)'
> (57)    mschap : External script failed
> (57)    ERROR: mschap : External script says: Reading winbind reply
> failed! (0xc0000001)
> (57)    ERROR: mschap : MS-CHAP2-Response is incorrect
>
> and whoever decided to disable the init.d script on upstart enabled
> systems by adding:
>
> case "$1" in
>         start)
>                 if init_is_upstart; then
>                         exit 1
>                 fi
>
> Lovely.
>
> Bug reported here for winbindd_privileged:
> https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1330220
>
> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
> FreeRADIUS Development Team
>
> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>



-- 
Brandon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20140615/1fb1c9b0/attachment.html>