Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have winbind set up to authenticate to our AD for samba shares. This is the third such server, and the only one having any issues. It seems after a random amount of time samba shares will just stop working. Winbind processes seem to be running but restarting them seems to fix the issue for a while.

Looking at the logs have been kind of hit an miss and I don't know exactly when it fails. One interesting thing is that it seems to be pulling from another domain controller that it shoudlnt. I censored out the domain name in this example. But isnt there some way to block authentication to a domain? I'm not sure if this is a symptom or a cause of the issue.

[2010/10/18 08:02:10,  0] winbindd/winbindd_cache.c:initialize_winbindd_cache(2577)
  initialize_winbindd_cache: clearing cache and re-creating with version number 1
[2010/10/18 09:15:54,  1] libsmb/clikrb5.c:ads_krb5_mk_req(686)
  ads_krb5_mk_req: krb5_get_credentials failed for xdc2$@CENSORED.COM (Cannot find KDC for requested realm)
[2010/10/18 09:15:54,  1] libsmb/cliconnect.c:cli_session_setup_kerberos(624)
  cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
[2010/10/18 09:15:54,  0] lib/util_sock.c:write_data(1139)
  write_data: write failure. Error = Connection reset by peer
[2010/10/18 09:15:54,  0] libsmb/clientgen.c:write_socket(242)
  write_socket: Error writing 108 bytes to socket 18: ERRNO = Connection reset by peer
[2010/10/18 09:15:54,  0] libsmb/clientgen.c:cli_send_smb(290)
  Error writing 108 bytes to client. -1 (Connection reset by peer)
share|improve this question
No answers makes me a sad panda. –  The Digital Ninja Oct 19 '10 at 18:31
My duct tape fix has just been to have a cron job restart winbind every hour. –  The Digital Ninja Oct 19 '10 at 18:51
Maybe an expired Kerberos ticket? –  weeheavy Feb 11 '11 at 14:26
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.