I have winbind set up to authenticate to our AD for samba shares. This is the third such server, and the only one having any issues. It seems after a random amount of time samba shares will just stop working. Winbind processes seem to be running but restarting them seems to fix the issue for a while.
Looking at the logs have been kind of hit an miss and I don't know exactly when it fails. One interesting thing is that it seems to be pulling from another domain controller that it shoudlnt. I censored out the domain name in this example. But isnt there some way to block authentication to a domain? I'm not sure if this is a symptom or a cause of the issue.
[2010/10/18 08:02:10, 0] winbindd/winbindd_cache.c:initialize_winbindd_cache(2577)
initialize_winbindd_cache: clearing cache and re-creating with version number 1
[2010/10/18 09:15:54, 1] libsmb/clikrb5.c:ads_krb5_mk_req(686)
ads_krb5_mk_req: krb5_get_credentials failed for
[email protected] (Cannot find KDC for requested realm)
[2010/10/18 09:15:54, 1] libsmb/cliconnect.c:cli_session_setup_kerberos(624)
cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot find KDC for requested realm
[2010/10/18 09:15:54, 0] lib/util_sock.c:write_data(1139)
write_data: write failure. Error = Connection reset by peer
[2010/10/18 09:15:54, 0] libsmb/clientgen.c:write_socket(242)
write_socket: Error writing 108 bytes to socket 18: ERRNO = Connection reset by peer
[2010/10/18 09:15:54, 0] libsmb/clientgen.c:cli_send_smb(290)
Error writing 108 bytes to client. -1 (Connection reset by peer)