[PLUG] Samba: trust fails

[Mike Leone <turgon@mike-leone.com>]

Yet another in a long line of samba problems for me. :-)

I have a Ubuntu 9.10 server. It used to work fine (I thought). But
today, I noticed:

root@workhorse:/etc/samba# wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_ACCESS_DENIED (0xc0000022)
Could not check secret

log.winbindd:

[2010/04/24 16:33:22,  0] libads/kerberos.c:332(ads_kinit_password)
  kerberos_kinit_password WORKHORSE$@DACRIB.LOCAL failed:
Preauthentication failed
[2010/04/24 16:33:22,  1] winbindd/winbindd_ads.c:127(ads_cached_connection)
  ads_connect for domain DACRIB failed: Preauthentication failed
[2010/04/24 16:33:52,  1] winbindd/winbindd_util.c:303(trustdom_recv)
  Could not receive trustdoms

log.wb-DACRIB:
[2010/04/24 16:45:27,  0] libsmb/cliconnect.c:996(cli_session_setup_spnego)
  Kinit failed: Preauthentication failed
[2010/04/24 16:48:57,  0] libads/kerberos.c:332(ads_kinit_password)
  kerberos_kinit_password WORKHORSE$@DACRIB.LOCAL failed:
Preauthentication failed
[2010/04/24 16:48:57,  1] winbindd/winbindd_ads.c:127(ads_cached_connection)
  ads_connect for domain DACRIB failed: Preauthentication failed

Googling tells me the machine account password is bad.

root@workhorse:/etc/samba# pdbedit -L -w
nobody:65534:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[U
         ]:LCT-00000000:
turgon:1000:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[U
         ]:LCT-00000000:

And I see no entry for workhorse (the name of this server).

So ... what now? :-) Do I delete the account in Active Directory, and
try and add again? Google is giving me no real pointers ...

___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug