Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Goal: join a Solaris 10 machine to an existing Active Directory.

Steps I did:

  1. Installed software (Samba 3.4.2 from http://www.sunfreeware.com)
  2. Received a Kerberos ticket with kinit admin-user@KERB.EXAMPLE.ORG
  3. Join domain: net ads join -U admin-user
  4. Start Samba and winbind

All steps are ok, checked this with klist, net getdomainsid , wbinfo -g and wbinfo -u.

Now the problem: getent passwd EXAMPLE+username returns nothing at all (on another Solaris 10 machine this works). Everytime I request somehing from AD, this shows up in log.winbind:

[2010/09/07 10:51:41,  0] winbindd/winbindd.c:750(request_len_recv)
  request_len_recv: Invalid request size received: 2088 (expected 2096)

According to google, I should ensure the version of libnss_winbind.so running does match the version of winbind that is running.

But how do I do that?

share|improve this question
add comment

2 Answers 2

up vote 3 down vote accepted
+50

Solaris 10 ships with a working (if not up-to-date) version of samba however the libraries are not compatible with the sunfreeware product.

The problem you are seeing is caused by the sunfreeware product not having an nss_winbind.so library in the package and /usr/lib/nss_winbind.so is not compatible.

To fix you will have to create your own. Download the samba source from sunfreeware and unpack it to a convenient directory then cd to it (samba-3.4.2 is current)

cd source3
./configure
make nss_modules

this will produce a

../nsswitch/libnss_winbind.so

On my test system copying this file to

/usr/local/samba/lib/nss_winbind.so.1

fixed the problem.

share|improve this answer
    
This works, many thanks! Great explanation too, somehow I lost myself after days of try & error. –  weeheavy Sep 13 '10 at 8:14
add comment

probably pam_winbind.so is the wrong version. look this link: http://www.mentby.com/adrian-graham/samba-334-31-sshwinbind-login-failure.html fix your problem. The winbind.so

share|improve this answer
    
Hi, I only found pam_winbind.so in the /usr/local/samba/lib/security directory. So i copied this to /usr/lib/security. After a restart of smbd, nmbd and winbind I get other errors: [2010/09/08 08:43:38, 3] winbindd/winbindd_misc.c:787(winbindd_priv_pipe_dir) [ 8182]: request location of privileged pipe [2010/09/08 08:43:38, 2] winbindd/winbindd.c:878(remove_client) final write to client failed: Broken pipe [2010/09/08 08:43:38, 3] winbindd/winbindd_misc.c:127(winbindd_list_ent) [ 8182]: list groups –  weeheavy Sep 8 '10 at 6:48
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.