Thanks for the replies.
I got this resolved.
It was case of my eyes not seeing what was in front of my face. The solaris upgrade DID replaced my /usr/lib/nss_winbind.so.1 link with Solaris's on library of same name. So I just had to rename that and recreate my link to the samba compiled libnss_winbind.so file. This is how I have the links done in /usr/lib

-r-xr-xr-x   1 root     root       50880 Dec 27 13:14 libnss_winbind.so
lrwxrwxrwx 1 root root 17 Dec 17 15:29 libnss_winbind.so.1 -> libnss_winbind.so lrwxrwxrwx 1 root root 17 Jan 12 13:58 nss_winbind.so.1 -> libnss_winbind.so



On 1/7/11 5:36 AM, Michael Wood wrote:
Hi

On 6 January 2011 01:11, CJ Keist<cj.ke...@colostate.edu>  wrote:
Well,
     I did smart thing and upgraded my Solaris box to Solaris 10 update 9.
  And now my winbind authentication has broken.  I have checked all my
/usr/lib/*winbind* and /usr/lib/security/*winbind* libs and all are still
good from my last install.  /etc/pam.conf, nsswitch.conf are still intact.
  wbinfo seems to work fine.  getent passwd username just returns empty.

This is what I'm getting in my /var/samba/log/log.winbindd file:

[2011/01/05 16:04:00.061446,  2]
winbindd/winbindd.c:819(winbind_client_request_read)
  Could not read client request from fd 22: I/O error
I don't run Solaris and am not using winbind, so this is just a guess,
but I hope it helps.

winbind communicates via a socket, which I think is put in /tmp by
default (/tmp/.winbindd/ or something like that).  Can you check what
"fd 22" is?  e.g. using lsof.  Maybe it's the socket.

It might be that Solaris 10 changes something about /tmp that
interferes with winbind's socket?  Maybe try putting the socket
somewhere else.  I think you're supposed to be able to do this with
"winbind:socket dir = ...".

It seems the "winbind:socket dir" option was introduced in Samba 3.2.0.


--
C. J. Keist                     Email: cj.ke...@colostate.edu
Systems Group Manager           Phone: 970-491-0630
Engineering Network Services    Fax:   970-491-5569
College of Engineering, CSU
Ft. Collins, CO 80523-1301

All I want is a chance to prove 'Money can't buy happiness'

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to